Follow

Overview: SSO Options in the Admin Console

SITE CONFIGURATION

If a Professional or Enterprise account has SSO enabled on their server, they will have the following selections available to them under the Site Configuration tab.

SiteConfig.png

TYPE

This displays the type of SSO they have enabled: GoogleAuth , ADFS , OneLogin and LDAP

SIGN ON OPTION

Only allow Single Sign On:

  • All the SSO users can login using their Company Credentials.
  • Admin cannot change the SSO users password.
  • Admin cannot set WEBDAV and FTP access for SSO users.
  • In the user detail email, password information will not be present
  • SSO User(s) cannot reset their password from User site -> Profile.

Allow Mixed Sign On – Default new users to Mixed Sign On:

  • All the SSO users can login using their Company Credentials.
  • All the new SSO users can get the FilesAnywhere credentials and able to login using it.
  • Admin can change the Sign On option at user level for all SSO users.
  • Admin can set WEBDAV and FTP access for SSO users.
  • In the user detail email, password information will be present based on the user level setting of SSO Authentication
  • SSO User can reset his password from User site -> Profile.
  • Admin can set the password of the SSO user.

Allow Mixed Sign On – Default new users to Single Sign On:

  • All the SSO users can login using their Company Credentials.
  • All the new SSO users will be default set to SSO mode so they will be only able to login using Company credentials.
  • Admin can change the SSO mode between SSO Only and Mixed SSO for SSO user(s)..
  • Admin can set the password fields of SSO users when Mixed SSO is on for the user.
  • Admin can set WEBDAV and FTP access for SSO users when Mixed SSO is on for the user.
  • In the user detail email, password information will be present based on the user level setting of SSO Authentication
  • SSO User can reset his password from User site -> Profile.

TRUSTED DOMAIN / EMAIL ADDRESS

  • This applies to GoogleAuth SSO only.
  • This is where you can set what emails or domains will be authorized to use SSO.
  • This applies to new users signing up and only allows the approved domains and email addresses to use SSO.
  • If a user's email address/domain is not listed here, then that user will receive an error message while signing up that states that they are not authorized to use SSO.
  • (I.E. filesanywhere.com; test@yourcompany.com)

 

 Add/Edit User Settings

 Once either Allow Mixed Sign On option is enabled in the Site Configuration tab, you will have a new section in add/edit user creation window called Single Sign On (SSO) Authentication.

SINGLE SIGN ON (SSO) AUTHENTICATION

SSO ONLY

When SSO Only is enabled, the password field for the user is disabled, since it is linked to the SSO credentials. Also, the user will be unable to edit their password through the user interface.

sso-only.png

Also, the Remote Access & Permissions (FTP & WebDAV) section under the Advanced options is disabled and will not be displayed.

sso_advanced.png

 

MIXED SSO

When Mixed SSO is enabled, the password field and options for the user is enabled.  Also, the user will be able to edit their password through the user interface under the Profile / Account section.

mixed-sso.png

Also, the Remote Access & Permissions (FTP & WebDAV) options will be available under the Advanced tab.

mixed_advanced.png

 

If you have further questions, please feel free to contact us and we will be happy to assist you.

Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.
Powered by Zendesk