Once Extensis Connect and your SSO provider are communicating, you will need to add users to Extensis Connect.
Note: If you have set up provisioning, then see this article instead for further information about how users are managed in Connect: Connect Administration: Teams
When adding Users, Connect uses the users email address as the primary login for SSO.
When adding Users, Connect works best if the email used to assign a seat is the same as the users "User Principle Name" (Azure) or their "Primary Email" (OKTA). If they are different, please see the section immediately following these examples.
Azure Example:
Okta Example:
If the UPN(Azure) or Username(OKTA) are not the same or do not match, users will need to do the following steps when logging in:
Azure:
- Assign the seat in Connect to the user's email address ( tester@extsupport.com in this example )
- When the user logs in to Connect, have them use their UPN address ( test@extsupport.com )
NOTE: They must include the domain in their UPN (and it must be a verified domain in Connect)
Step 1
Step 2
OKTA:
- Assign the seat in Connect to the user's primary email address in OKTA
- When the user logs in to Connect, have them use their OKTA Username address
NOTE: They must include the domain in their Username (and it must be a verified domain in Connect)
Ways to add users in Connect:
There are currently three ways to add users to Connect:
NOTE: Gmail, Hotmail, etc... logins: Users using a login with a different domain than the one SSO is enabled for, will not be directed to the SSO sign on. They will instead by directed to the normal connect.extensis.com login screen and use their extensis password to log in.