| Excerpt |
|---|
In this page you can find information and rules concerning the management of your local and external identity provider accounts via the BSS. |
Since the interworks.cloud platform can be integrated with external authentication services, providing registration/login capabilities for BSS users, we have introduced a handy tool for the BSS user to manage the connected “external identity provider” accounts as well as the “local login” account, from within the BSS.
How to Locate the Login Options
The tool is found inside the section named “Login Options” which is located under the BSS Setup > Administration > Personal Setup > Login Options.
The “Login Options” section presents the user with alternative ways to log in to the BSS.
From this section, the BSS users can manage their Identity Provider (IdP) accounts, be that local or external, by either connecting or disconnecting them. Please note that this section is displayed only during the following two scenarios:
Two External Login IdPs: At least two external IdPs are activated and displayed on BSS.
Local Login + one or more External logins: The Local Login option is not disconnected and at least one external IdP is activated and displayed on BSS.
External Identity Providers can be set up on the BSS platform as explained in the External Authentication - Single Sign-On(SSO) in BSS page.
Two External Login Identity Providers
| Status | ||||
|---|---|---|---|---|
|
A BSS user, that is logged in via one external IdP and has another IdP available and connected with the BSS, can see the following screen.
The Login Options section is essentially a list that contains rows populated in alphabetical order with each active IdP. More specifically, the:
Color Point (column): Display’s a colored point that depicts whether a Login connection is connected (green) or disconnected (red).
Logo (column): Displays the logo of the provider.
Provider (column): Displays the provider’s name. The provider name is the value the BSS user has provided to the Instance Name field of that external IdP.
Status (column): Displays the connection status of a given active provider, meaning whether the given active provider is connected to the BSS user’s contact or not.
Connect/Disconnect (action button): Initializes the connection or disconnection process of an IdP with the BSS user's contact.
| Rw ui textbox macro | ||
|---|---|---|
| ||
Minimum Requirement for Disconnecting IdPs The system always requires at least one connected account to carry out the authentication process (login). For this reason, when only one connected IdP is found, its Disconnect button is hidden. |
Local Login With One External Identity Provider
| Status | ||||
|---|---|---|---|---|
|
A BSS user, that is logged in locally and also has one external IdP account connected, can see the following screen.
The Login Options section is the exact same list that is analyzed previously, but in this scenario, the “Local Login” option is always displayed first on the Login Options list.
Connect an Identity Provider to the BSS User’s Contact
When the BSS user clicks on the Connect button of the 2nd external IdP, the following popup will be displayed, informing the BSS user that a redirection to an external system will occur for the connection process to continue.
Upon clicking on the Continue button, the BSS user will be redirected to the IdP’s log-in page to provide their relative credentials.
Once the connection is successful the BSS user will be automatically logged in, and concurrently, the BSS contact will be linked with the IdP’s external account.
| Rw ui textbox macro | ||
|---|---|---|
| ||
Unique connection rule between BSS contact and external IdP account No two BSS contacts can be connected to the same external IdP account. If a BSS user tries to connect an external IdP account that is already connected to another BSS contact, then the following message is displayed and no connection is made.  |
Disconnect an Identity Provider from the BSS User’s Contact
A. If there are two or more active external accounts connected to the BSS user’s contact, the BSS user is able to disconnect one of them. However, there are two disconnect scenarios that require your attention.
The BSS user tries to disconnect the IdP they are not logged in with currently: Upon clicking on the “Disconnect” button, the BSS user will see the following pop-up window, requiring the acceptance of the action.
If the user clicks on the “Disconnect” button on the pop-up, the respective IdP will revert back to its disconnected status.
The BSS user tries to disconnect the IdP they are logged in with currently: Upon clicking on the “Disconnect” button, the BSS user will see the following informative pop-up window.
The BSS user is informed that he cannot perform this action. As a result, he must log out and then log in with a different connected account if he wishes to proceed with the disconnection.
Different Instances of the Same External Identity Provider
The BSS user can activate and display more than one instances of the same external IdP. In this case, each instance is shown in a different row.
Table of Contents
| Table of Contents | ||||||
|---|---|---|---|---|---|---|
|