The login flow

For more information on SSO and passwordless authentication see the dScribe authentication proces.

Within dScribe, click on the profile icon and select "Company Settings" to complete with some catalog specific settings. This option will only appear if you are a superuser.

1. Configure SSO

dScribe uses the OpenID connect to support Single Sign-On (SSO). That means you need the following information from your IdP provider:

User Info Url
Issuer
Authorization Url
Token Url
Client Id
Client Secret

Clicking on the "Configure SSO Providers here" will take you to the SSO page as described in dScribe authentication proces

Look at Azure Entra ID (Azure AD) for an example.

We will not show the secret again once its been saved to our systems.

Doing this correctly will make the SSO button appear on our login page:

2. Default team

When a user is created for the first time through #2.-dynamic-user-creation they will be automatically assigned to this team. This will not be enforced on subsequent logins.

3. Team mapping

It is possible to link security groups from Azure AD to teams within dScribe. Every time a user logs in, we will attempt to add them to the teams as defined in the mapping. If the user is removed from an AD security group, they will also be removed from those teams in dScribe.

FAQ

Why set up Enterprise Authentication

Users can be synchronized with the central Identity Provider used in your organization. This way, users do not need to remember separate login details but can reuse their existing enterprise credentials.

Which types of Enterprise Authentication are supported

dScribe uses the OpenID connect to support Single Sign-On (SSO).

We are happy to help in you setting up SSO in your organization. If you have questions, feel free to contact us via support@dscribedata.com.