Add/Assign users to Connect through SSO

Once Extensis Connect and your SSO provider are communicating, you will need to add users to Extensis Connect.

When adding Users, Connect  uses the users email address as the primary login for SSO. 

When adding Users, Connect works best if the email used to assign a seat is the same as the users "User Principle Name" (Azure) or their "Username" (OKTA). If they are different, please see the section immediately following these examples.

Azure Example:

Okta Example:

If the UPN(Azure) or Username(OKTA) are not the same or do not match, users will need to do the following steps when logging in:

Azure:

1. Assign the seat in Connect to the user's email address
2. When the user logs in to Connect, have them use their UPN address
   NOTE: They must include the domain in their UPN (and it must be a verified domain in Connect)

OKTA:

1. In Connect, login using the user email address (This will bring up a windows from your Azure/OKTA tenant asking for a login)
2. Change the email address in your tenant's window, to the UPN(Azure) or Username (OKTA) and enter your password

Step 1

Step 2

Ways to add users in Connect:

There are currently two ways to add users to Connect:

• Manual invitation
• Bulk import

NOTE: Gmail, Hotmail, etc... logins:    Users using a login with a different domain than the one SSO is enabled for, will not be directed to the SSO sign on. They will instead by directed to the normal connect.extensis.com login screen and use their extensis password to log in.