SSO Page and SSO Profile Approach

[Andy Gilbert]

It would be great to have a way of our customers not having to select or see all the configured SSO profiles when they visit the employee portal. Has this been raised before? Could it be investigated?

 

thanks

Andy

 

 

[Andy Gilbert]

can anyone at Hornbill help with this item??

[Steve Giller]

@Andy Gilbert Once selected, the page remembers the preference so (on any given browser) the User should only have to do this once.

If you are using multiple domains, there is no way of the system knowing who has opened the login page, so there would be no way of knowing which domain to present and which to hide.

[Andy Gilbert]

thanks for coming back @Steve Giller

i didnt know if it would be possible to use a different login page per domain and then it redirect or have functionality where the domain in the username of the credential being passed could relate to the SSO profile

 

[Steve Giller]

@Andy Gilbert Any domain in the username (assuming you're using a UPN/email to log in) is not presented to the platform until you fill in the username/password boxes, so as above, Hornbill does not know which domain the login is coming from until after we've displayed the selection box.

[Adam Toms]

As a follow onto this an apologies to hijack this forum thread, but it is related to the above to a large degree.

Is there a way of reordering our SSO profiles from the dropdown list?

Our main SSO profile is not first alphabetically, and we believe to allow the majority of our users select the correct profile quicker we would like to reorder, at the moment this seems to default to an alphabetical order which isn't the most appropriate for us.

Any help would be gratefully appreciated.

 

Many Thanks

Adam

[Victor]

@Adam Toms I understand that you opted to have your contacts authenticate in Hornbill using SSO. That's fine(ish) when contacts are authenticated against a single IdP but imo, not that fine and I would say unadvisable if the list is ...well, not one basically

If you don't mind explaining, why exactly you opted for this approach?