Enforce login option for users

[John C]

@Martyn Houghton morning, perhaps can you help me?

I am looking for the option to "enforce" users to use Hornbill direct login as oppose so SSO, I enabled the option below but the users are still given the option to sign on via SSO too.

Can you point me in the right direction please?

Thanks

 

[Martyn Houghton]

@John C

Other than setting the default which you have found, the only other way I believe this is possible would be to disable the SSO profile itself.

Cheers

Martyn

[John C]

@Martyn Houghton OK - Thank you....can't really test now

 

[John C]

@Martyn Houghton your right, that does work, I disabled it for 10 seconds and it prompts for direct login only.

However nobody's password seems to work which is strange!? Any idea why passwords are not working @Victor

I thought the password would be the users network login as it has been replicating with Azure all along (with SS0 enabled)

Thanks

[John C]

@Victor now I am locked out of the service, can you unlock my account please?

Guess I tries the password issue too many times

[John C]

@Victor it's OK, I logged in with admin account and unsuspended myself.

Do you know why the passwords for users are not working?

[Victor]

@John C 

6 minutes ago, John C said:

Do you know why the passwords for users are not working?

What method they use for authentication/login, Hornbill Direct or SSO?

[John C]

@Victor We currently are using SSO, but we will need to move to direct login shortly as their AD accounts will be disabled so they won't be able to access via SSO

When I and three others attempt to login via direct, we get the below message, meaning our password is incorrect? I would of thought the password would be the same as their network logon with the LDAP sync etc? I hope I am making sense.

I don't want to have to go into 800+ users accounts in Hornbill to reset their password individually....

Thanks

 

[Victor]

7 minutes ago, John C said:

I would of thought the password would be the same as their network logon with the LDAP sync etc?

@John C we don't have any functionality to "sync" passwords... a user password in Hornbill is either set manually (by a user) or can be set during user import, when using the Hornbill User Import tool(s). When you say "LDAP sync" I presume you are referring to the SSO profile update (for example when the certificate is updated on a SSO profile in Hornbill). This "sync" does not affect users it only updates the profile configuration.

[John C]

@Victor OK...so is there a default password for each account or how can I find out what my own password is for example?

Like I mentioned, surely I do not have to manually set each password going forward in order to use direct login?

[Victor]

@John C there are no default passwords and passwords are encrypted in the database, they cannot be made visible. If you are to use direct login the a password needs to be set for each users that need access. This can be done by an admin or each user can do this themselves using the "Forgot Password" option on the login screen. However, if SSO is used, the Hornbill user passwords are not necessary, they have no play in SSO authentication.

[John C]

@Victor  OK - thanks...no way of doing a bulk update using a csv import via Hornbill or anything no?

[Victor]

@John C the passwords can only be set in bulk when using a user import tool, for example: https://wiki.hornbill.com/index.php/Azure_User_Import. Can be done via a CSV, but requires a bit more work beforehand and you would use the https://github.com/hornbill/goDb2HUserImport where the source DB can be a CSV file. There is also the option to request expert services to look into a bulk update. 

[John C]

@Victor thank you..

re the expert services, do I just send a mail to customer.success@hornbill.com? (how long roughly to implement?)

Thanks

[Victor]

@John C yes, the email is fine. You can also use the customer success portal: https://success.hornbill.com/hornbill/. Cannot say how long I'm afraid without an initial assessment.

[Martyn Houghton]

@John C

The alternative is for the user to individually reset the passwords using the Forgot Password process. This will also enforce any changed made to the password requirements in the settings. This way you do not have to set or transports a password for the users.

Cheers

Martyn