Live Chat Software by Kayako |
|
SSO & MFA/2-Step Authentication with RingOS
Posted by Albert Diaz, Last modified by Albert Diaz on 22 September 2023 06:19 PM
|
|
|
What is Single Sign-on? Single sign-on (aka SSO) is a type of authentication method that allows users to login to multiple applications or websites with one set of credentials. For example logging into your favorite SaaS app or website using your Google account. It simplifies credential management and makes use of security features like Multi Factor Authentication (aka MFA), usually available from the largest and most common SSO providers. The RingOS Platform supports SSO and is available to Partner Staff and Customer Users via your custom login page. The feature is disabled by default and can be enabled by a Partner Staff member or an individual User. Available SSO Providers
How do you enable or disable SSO for another Users login? 1. Login in as a 2. Add or edit a Partner Staff -or- Customer Portal User. 3. Set the "SSO" field to one of the available options: a. Allow: Allow SSO and standard logins for this user. b. Disabled: Disable SSO logins and require standard logins for this user. c. Force: Force SSO logins and disable standard logins for this user.   How do you enable or disable SSO for your own login? 1. Go to the My Profile link on the top right of the page. 2. Set the "SSO" field to one of the available options: a. Allow: Allow SSO and standard logins for this user. b. Disabled: Disable SSO logins and require standard logins for this user. c. Force: Force SSO logins and disable standard logins for this user.  How does it work? When the staff or customer user reaches your login page they can now click the Google or Microsoft login buttons as desired. This will prompt them with a provider based login popup called the SSO window. Credentials typed into this window are NOT seen by RingOS and collected directly by the SSO provider. After the user completes the SSO login, the SSO provider will respond to RingOS with the identity of the User including its email address. RingOS will then match the SSO email to the emails of its local staff and customer users to allow or block an SSO login per its settings. If the email matches multiple users with SSO enabled the system will allow you to choose which user you would like to proceed as.  How do you enable MFA/2-Step Authentication Services? MFA/2-Step authentication services are offered by the SSO provider. Please see the links below for information from those partners. Microsoft - M365 Global Admin Info: https://learn.microsoft.com/en-GB/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide - M365 User Info: https://support.microsoft.com/en-gb/office/set-up-your-microsoft-365-sign-in-for-multi-factor-authentication-ace1d096-61e5-449b-a875-58eb3d74de14 - Microsoft Authenticator Android/iOS Apps: https://support.microsoft.com/en-us/account-billing/download-and-install-the-microsoft-authenticator-app-351498fc-850a-45da-b7b6-27e523b8702a - 2 Step Verification: https://myaccount.google.com/signinoptions/two-step-verification/enroll-welcome - Authenticator App for Android: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_US&gl=US - Authenticator App for iOS: https://apps.apple.com/us/app/google-authenticator/id388497605 | |
|
|