Single Sign-on (SSO) lets users log into the IDI platform by providing their User ID and Password for an external system. In instances where users are already logged into these systems as part of their normal work day it allows them quick, easy and secure way to access the IDI platform without needing to manage yet another user identity.
Single Sign-on works by handing over users to the logon page for an external system when they want to gain access to the IDI platform. This external system, called an Authentication Provider, handles all the details around keeping track of the user’s account credentials including their User ID, and password. If the user is successful in logging into the external system then that Provider automatically redirects them back to the IDI platform. Along with sending them back the Provider lets the IDI platform know who the user is and that they are authorized to access the system. The user skips having to provider their IDI platform credentials and is sent right into the application.
Customer administrators can enable Single Sign-On for their users when logging into the IDI web application. The IDI platform supports SSO via two avenues:
OAuth Log In (user facing) and
Security API Authorization Codes (programmatic only).
This configuration guide describes how to enable OAuth support for customer user accounts.
Developers looking for information on SSO via Authorization Codes should refer to IDI’s Web API developer documentation found on E-Support (or Knowledge Center) under Developer Resources.