Welcome to OpsAnalitica SSO Configuration Document, the following are a couple of things to keep in mind when you will be using an SSO provider with the OpsAnalitica Platform:
We support the Open ID Connect protocol.
You have to maintain a User Account in the OpsAnalitica Platform as well as your SSO Provider.
Your user accounts must also have the proper roles in our system to grant access to the OpsAnalitica Platform.
You can allow your users to use your SSO provider and have local passwords, this is a configuration.
Resources
Okta:
Azure:
OneLogin:
To access the SSO Configuration:
You will need have Administrator access to configure SSO.
Click on Admin - Users - Authentication - New
At this point you are going to have to create your OpenID Connect profile in your SSO portal for OpsAnalitica.
Your SSO portal will provide you with the information you need to enter into OpsAnalitica:
Client Id
Client Secret
Authority
Response Type
As a side note, we have found that some of these SSO platforms have horrible documentation and we have had clients that had to dig very hard to find these values.
Enter the proper connection information:
All of this information will be provided by your SSO platform and it is based on your configuration of that platform. If you need help finding that data, contact your SSO provider's help desk.
Click Create
Then our page is going to reload and provide you with additional values that you will need to enter into your SSO OpsAnalitica Connection.
Key
Login Url
Redirect Url
Once you have completed adding those pieces of data to your SSO platform your SSO connection should work.
You will also notice that we have included OpsAnalitica Logos for you to use in your SSO portal at the bottom of the page.
User Configurations:
You have the following configuration options for your User Accounts. These can be configured manually or through the API.
You should uncheck Can Change Password.
You should uncheck Must Change Password.
If you choose to Remove Password, then the only way for an end user to login to OpsAnalitica is through the SSO portal. If you leave the end user's password, then they will be able to login locally and through SSO.
Make sure that they have the proper roles on their OpsAnalitica account so they can access the platform.