Once Extensis Connect and your SSO provider are communicating, you will need to add users to Extensis Connect.
When adding Users, Connect uses the users email address as the primary login for SSO.
When adding Users, Connect works best if the email used to assign a seat is the same as the users "User Principle Name" (Azure) or their "Username" (OKTA). If they are different, please see the section immediately following these examples.
Azure Example:
Okta Example:
If the UPN(Azure) or Username(OKTA) are not the same or do not match, users will need to do the following steps when logging in:
Azure:
- Assign the seat in Connect to the user's email address
- When the user logs in to Connect, have them use their UPN address
NOTE: They must include the domain in their UPN (and it must be a verified domain in Connect)
Step 1
Step 2
OKTA:
At this time OKTA authentication requires that these two values match
Ways to add users in Connect:
There are currently two ways to add users to Connect:
NOTE: Gmail, Hotmail, etc... logins: Users using a login with a different domain than the one SSO is enabled for, will not be directed to the SSO sign on. They will instead by directed to the normal connect.extensis.com login screen and use their extensis password to log in.