Editing a Single sign-on setting
Permissions
Single sign-on settings can only be edited by Users who have either a:
- Super admin account type
- Role with the Create/Edit or Edit permission for Single sign-on, under the Administration tab, enabled
Edit a single sign-on setting
To edit a single sign-on setting, double-click the row for the setting you need to edit, or select Edit in the Actions menu. Either option takes you to the Edit screen.
The settings will look like this:
Single sign-on configuration Name
This can be amended but not removed, as it is a mandatory field. It must have a unique value, so if it is changed to the same value as another single sign-on setting, an error will be displayed:
Enabled
The state of the Enabled switch can be changed without restriction. This will be reflected in the list under the Enabled column header. A green tick is displayed only when the switch is enabled.
Single sign-on provider
This cannot be changed.
Tenant ID
The value can be changed but not removed, as this is a mandatory field.
Client ID
The value can be changed but not removed, as this is a mandatory field.
| You cannot save the settings with an empty mandatory field, the Save button is disabled and an error is shown for the specific field: | mceclip4.png |
Client secret
You'll note that the Client secret is hidden with asterisks. If you attempt to edit this field, the value will be removed immediately. Again, this is a mandatory field.
Redirect URI
This field is disabled, so cannot be edited. It was automatically populated when the connection between the provider and Autologyx was established.
Automatically create user
The Automatically create user switch can be changed without restriction. However, if it was disabled and is made enabled, the field Role to assign to created user becomes unhidden but is not mandatory.
| mceclip5.png | mceclip6.png |
Here, you can search/select one or more Roles to be given to Users who do not have a User account but are created the first time they access the system using single sign-on.
If you enable this feature but have not selected a Role for users created this way, they will be able to log in to the Landing page. Their Workspace will have no Records and their Tasks list will be empty because they have not yet been added to an Object class Permission set or been made a Task assignee.
You can add or remove Roles from this setting without restriction. The change is applied for new Users being created in this way.
The maximum number of Roles that can be selected is 10, as this is the maximum number of Roles a User can be given.
Cancel and Save
The Cancel button next to Save can be used at any time to abort the edit. The User can also simply navigate away from the page using the left-hand menu or close the browser tab.
| If the User makes changes but clicks the Cancel button the Unsaved changes will be lost warning is shown. | mceclip7.png |