1. SSO in general
Single Sign-On (SSO) is an authentication process that allows a user to access multiple applications or systems with one set of login credentials.
2. What is this module about
This module is about the authenticating users in Asset via a Identity Provider.
For more information about the SSO as a whole, see: Single Sign-On in Asset
3. Why use this module
- Makes things more convenient for users by allowing them to log in to Asset through Single Sign-On (SSO), so they don’t need to remember a separate username and password.
- Increases security by reducing the number of individual usernames and passwords required for different applications.
- Simplifies IT administration by centralizing user authentication and account management.
4. How to activate this module
As for every new module, use the ‘Module activation’ option on the administrator startboard (only available for level 2 and level 3 admins). For more general information about these 'Module activation' options, see Module activation
The SSO setup has separate configuration guides for the customer and implementation consultants. These configuration guides can be found via: Configuration guides SSO. This module activation is a step in the complete configuration guides.
4.1 Prerequisites before activating this module
The SSO setup does not require any other modules to be active. The only prerequisites for the SSO setup are:
- All users who need access to Asset are set up in the application and have the correct SAML username assigned.
- The customer has provided the Federation Metadata XML file or the Federation Metadata URL.
4.2 Module activation
For this specific module activation, no settings to be determined apply. The module activation will create the SSO configuration object automatically and this SSO configuration object is needed to complete the configuration.
4.3 Data imports
No data imports are required for this module activation. However, users may need to be imported if they are not already in Asset. The necessary organization and user import connectors are available by default and do not require activating any (additional) modules.
The following default import connectors are available:
Reference | Name | Description |
|---|---|---|
FMB-F-001 | Import own organizations and departments | This can be used to import own organizations and departments. |
FMB-F-002 | Import own employees and users | This can be used to import the users. |
For more information on data imports in general, see: Data imports
4.4 System groups
For this module activation, no specific system groups are applicable.
For more general information on user profiles, system groups, users, and the user profile dashboard, see: User management
4.5 Navigation menu and startboard options
No additional navigation menus become available, when activating SSO.
For more general information on the navigation menu and startboard, see: Navigation menu and Startboard
5. Additional reports
No additional reports are applicable, when activating the SCIM integration.
6. Additional settings and options after enabling
For most modules, additional settings can be configured after the initial module activation via the 'Module settings' option on the administrator startboard. SSO works a bit differently. There is no module setting for SSO; only the SSO configuration object is required, along with the initial setup and certificates.
To navigate to the SSO configuration, go to ‘Client settings’ → ‘Authentication' tab → 'SSO configurations’ button.
7. Additional information
No additional information currently.
8. User manual
No user manual applicable for SSO.
9. Q&A
Waiting for questions to answer