The following is a reference walking through setting up Preemptive SSO using the SSO Setup Assistant. This is an example only.
Note: depending on the options you choose these instructions will change. It is best to go by what the SSO Setup Assistant says and use the following instructions only as a reference.
- Follow the instructions here: Enterprise Single Sign-On (SSO) to add a tech user and Enable Azure.
- Log in with your Tech User account information at: https://whentowork.com/logins.htm
- Once logged in, click the SSO tab.
- Click the SSO Setup Assistant button to launch the assistant.
- Follow the step by step instructions in the Assistant.
The Assistant will take you through each step. NOTE: This is for reference only:
- Welcome (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Select an SSO Mode: the following steps closely follow preemptive selection (follow the SSO Setup Assistant for your selection). (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Security Preferences: including two-factory for authentication for native login, manager native login, and accessing WhenToWork using Work Assistant (Alexa skill). (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Azure App Creation: if you haven’t already done so, you will need to create a new SSO app for WhenToWork in your Azure portal. (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- OAuth Base URI (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- OAuth Metadata URI (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Validate Id Token Settings (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- External Id Claim (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Client Credentials (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Validate Access Token Settings (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Custom Claims (optional) (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Authorization Access Control Expressions (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Users Query Url and required permissions (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Manager Provisioning
If the main manager account is not provisioned yet, choose the name of the person from the list of Azure users on the left and then click the “Click to WhenToWork Manager [name]” button on right to link. (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT) - Employee Provisioning (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Home Page URL (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
- Apply Changes (FOR REFERENCE ONLY, FOLLOW THE SETUP ASSISTANT)
Related Links: