Note: This is only for customers who have Single Sign-On enabled on their site. If you wish to enable Single Sign-On, please get in touch with your Customer Relationship Manager.
Security Groups for SSO
The following security group will need to be added to your Active Directory:
Note: This is configurable to match your preferred naming convention. If you want a different configuration, please let us know exactly how you have named the group, so we can match the configuration on our end.
Our current SSO solution with Assurance allows auto-provisioning of users when they have group membership but does not authorise to specific access roles.
During authentication if a user does not exist with a matching email address in that tenant, the user will auto-provision as a lite-user licence. It can then be changed to a full user (if required) and given access roles per this Support Hub page. This page lists the type of roles available for full users.