This article:

  • Explains what User Provisioning (UP) and (Single Sign-On) SSO are and why they can be useful when implementing Proxyclick
  • Presents the different UP and SSO options
  • Outlines the alternatives to UP and SSO

 

User provisioning

What it is

User Provisioning refers to the automatic synchronization of users: people defined in your Active Directory will be automatically synchronized with the colleagues list in Proxyclick. E.g. new people in the AD will be added to the colleagues list in Proxyclick.

Why it is useful when implementing Proxyclick

Synchronizing users is especially useful to keep the list of hosts up to date in the Welcome kiosk app: visitors are then able to select their host and hosts receive check-in notification via email and SMS.

Options regarding user provisioning

Table below highlights the different options regarding User Provisioning:

Provider Method Status
LDAP Pull Available (instructions)
Onelogin Push Available (instructions)
Okta Push Available (instructions)
Centrify Push Under analysis

 

Some explanatory notes:

  • For user provisioning, one option is to have Proxyclick pull the data (on a daily basis) from your Active Directory through a LDAP integration. This requires access to your servers behind your firewall. The other option is to have updates pushed from your systems to Proxyclick (in which case we do not need to connect to your servers). Different vendors propose UP under this formula (Onelogin, Okta, Centrify, …)

 

Single Sign-On

What it is

Single Sign-On gives your users the ability to sign in to different applications using the same unique set of username and password. Users sign in once via the so-called Identity Provider (external to Proxyclick) and can then, from there access different apps (including Proxyclick) without logging in again. For SSO, Proxyclick supports the SAML 2.0 standard.

Why it is useful when implementing Proxyclick

SSO is only really useful if you require most of your staff to pre-register visitors through Proxyclick. If your users don’t need to preregister visitors but only need to be notified upon check-in of their visitors, SSO is not really needed. Please also note that calendar integration can also be used to pre-register visitors (without SSO as users then don’t need to log in to pre-register).

Options regarding SSO

The table below highlights the different options regarding SSO:

Provider Status
ADFS Available (instructions)
Onelogin Available (instructions)
Okta Available (instructions)
Centrify Under analysis

 

Managing both User Provisioning and SSO

Many combinations are possible:

  • Manage both UP and SSO with same vendor (e.g. OneLogin or Okta)
  • Only do UP (e.g. through LDAP)
  • Only do SSO
  • Combine different options (e.g. UP though LDAP and SSO through SAML) …

 

Your UP/SSO provider is not listed? Please let us know. We can deploy fast.

 

Alternatives to UP and SSO

Many of our clients choose not to implement UP and SSO.

In particular, many use the Excel upload to create, invite, edit, or delete users in bulk.

For this, click on “Colleagues” and then on “Bulk upload” to launch the wizard.

You will notice the Excel upload not only manages account creation, edits and deletions (user provisioning) but also allows you to invite users in bulk (can replace SSO).

You can also create, manage, delete and invite users one-by-one.

  • Click on Add Colleague to create / invite users
  • Click on their individual profile to edit or delete them

 

Any question(s)? Please contact us. We’re there to help!

FacebookGoogle+EmailTwitterLinkedIn

Was this article useful?

This article was not usefulThis article was useful (No Ratings Yet)
Loading ... Loading ...