Manage Your SSO Configuration
The Single Sign-On page
Once SSO is set up, the page shows a summary of the configuration: Provider, Directory / Host,Client ID, a hidden Client Secret, Profile for new SSO users, Enabled, Verified, Enforce SSO, Company Domains and the Callback URL.
[SCREENSHOT: Single Sign-On summary page]
Below the summary are these buttons:
| Button | What it does |
|---|---|
| Edit | Change any setting. Leave Client secret blank to keep the current one. |
| Test sign-in | Runs a real sign-in through your provider and verifies the settings. Shown only while SSO is enabled. |
| Reset SSO links | Unlinks everyone from their identity provider account. Each person is matched by email again on their next SSO sign-in. Nothing else changes. |
Linked users
The Linked users list shows everyone who has signed in with SSO, with an Unlink button for each.
Unlink someone when their identity provider account was deleted and recreated. The new account has a new internal ID, so MSPCFO refuses it until the old link is removed. After you unlink them, their next SSO sign-in matches them by email and links the new account.
[SCREENSHOT: Linked users list with Unlink buttons]
Switching provider or directory
Changing the provider, or the directory/domain/hostname, unlinks everyone automatically, because identity provider IDs only mean something inside the directory that issued them. People are matched by email again on their next sign-in. Verification is cleared too, so run Test sign-in afterwards.
Changing the profile for new SSO users
You can change this setting at any time. The change only affects accounts created afterwards.
A profile chosen here can't be deleted while it's selected. Pick a different one first.
Offboarding someone
- Disable or remove the person in your identity provider so they can't sign in there.
- Remove them from your company on the MSPCFO Users page.
SSO never adds a removed person back. To restore access, invite them again.
Turning SSO off
Edit the configuration and untick Enable SSO for this company. SSO sign-in stops, enforcement stops, and everyone signs in with their password again. Your settings are kept, so you can turn SSO back on later.
0 Comments
Add your comment