What are the initial steps to set up my users & groups (with single sign-on)?

Tier: Enterprise

Overview

All users can create an account on any findhelp site. However, your organization can authorize users on your site to have additional functionality and report access. Single sign-on (SSO) functionality gives your organization the ability to automatically create user accounts upon a user’s first time accessing the site and automatically assign those users to a group. Additionally, SSO allows authorized users to log into your site using credentials (username and password) from another system that they use. This allows for a seamless login experience for your users. 

Site Administrators and Group Managers can use the User and Group Management tool to manage additional user permissions and create groups for your site. Groups allow users to share favorite folders, notes, assessments, and navigation history with each other.

Learn more about setting up Single sign-on here: Single sign-on (SSO)

What are the Initial Steps to Set Up My Users?

When a user accesses your site for the first time using Single sign-on (SSO), their account can be automatically created without any manual intervention by passing in the required information about a user from your Active Directory system to your findhelp site.

Configure Single Sign-On

Various attributes from your Active Directory system can be passed to your findhelp site to automatically create a user account. Email, Name ID, First Name, and Last Name are required attributes for a user account to be created. Title, Department, and Group are additional fields that can be configured but are not required for a user account to be created.

Work with your Active Directory Administrator and Customer Success Manager to ensure all required and desired attributes are passed from your Active Directory system to your findhelp site. 

What are the Initial Steps to Set Up My Groups?

When a user accesses your site for the first time using SSO, a group may be automatically assigned to the user via the “group” attribute. Groups within your site can be created automatically based on a field in your organization’s Active Directory, or, a static Group can be applied to all users. 

Single sign-on can only assign one group to a user automatically. Users can be added to multiple groups, but any additional groups must be manually created and assigned by a Site Administrator or Group Manager. 

Determine Which Group(s) Should be Automatically Assigned to Users

Depending on your organization’s Active Directory configuration, you can map an attribute from your Active Directory to assign a particular group to a user based on that attribute. Work with your Active Directory Administrator to determine which, if any, attributes on a user’s account should identify which group they should be assigned to.

Configure Single Sign-On Group Attribute

Work with your Active Directory Administrator and Customer Success Manager to ensure that the appropriate “group” attribute is passed from your Active Directory system to your findhelp site for each relevant group. 

(Optional) Enable Team Navigation

By default, groups that are created via SSO do not have Team Navigation enabled. Work with your Customer Success Manager to enable Team Navigation for groups created via SSO. 

Was this article helpful?
0 out of 0 found this helpful