{"id":9327,"date":"2023-05-28T20:59:03","date_gmt":"2023-05-28T20:59:03","guid":{"rendered":"https:\/\/when2work.com\/help\/mgr\/?page_id=9327"},"modified":"2024-08-07T17:14:53","modified_gmt":"2024-08-07T17:14:53","slug":"enterprise-sso","status":"publish","type":"page","link":"https:\/\/when2work.com\/help\/mgr\/enterprise-sso\/","title":{"rendered":"Enterprise Single Sign-On (SSO)"},"content":{"rendered":"<div class=\"inforight\">\n<ul>\n<li style=\"text-align: left;\"><strong><a href=\"https:\/\/when2work.com\/help\/mgr\/enterprise-sso\/\">Enterprise SSO<\/a><\/strong><\/li>\n<li style=\"text-align: left;\"><a href=\"https:\/\/when2work.com\/help\/mgr\/sso-setup-start-here\/\">SSO Start Here<\/a><\/li>\n<li style=\"text-align: left;\"><a href=\"https:\/\/when2work.com\/help\/mgr\/sso-setup-assistant\/\">SSO Setup Assistant<\/a><\/li>\n<li style=\"text-align: left;\"><a href=\"https:\/\/when2work.com\/help\/mgr\/sso-mode-options\">SSO Mode Options<\/a><\/li>\n<li style=\"text-align: left;\"><a href=\"https:\/\/when2work.com\/help\/mgr\/sso-error-codes\/\">SSO Error Codes<\/a><\/li>\n<li style=\"text-align: left;\"><a href=\"https:\/\/when2work.com\/help\/mgr\/sso-glossary\/\">SSO Glossary<\/a><\/li>\n<li style=\"text-align: left;\"><a href=\"https:\/\/when2work.com\/help\/mgr\/iam-emp-provisioning\/\">IAM Emp Provisioning<\/a><\/li>\n<\/ul>\n<\/div>\n<p>Single sign-on (SSO) is an authentication method that allows users to sign in using one set of credentials to multiple independent software systems. Using SSO means a user doesn&#8217;t have to sign in to every application they use.<\/p>\n<p data-renderer-start-pos=\"2900\">WhenToWork&#8217;s IAM (Identity and access management) support follows the OAuth2\/OpenID standard, as implemented by Azure AD (Entra ID) and Okta identity access management providers.<\/p>\n<p data-renderer-start-pos=\"2900\"><strong>Configuration and setup is performed by a new &#8220;Tech&#8221; user type, presumed to be someone in your organization having expertise in Azure or Okta implementations.<\/strong><\/p>\n<h3 data-renderer-start-pos=\"2900\">Add A Tech User<\/h3>\n<p data-renderer-start-pos=\"2900\">A Tech user account can be created for anyone, including the current WhenToWork company Manager; however, SSO configuration capabilities are only accessible when signed in to the Tech user account.<\/p>\n<p data-renderer-start-pos=\"2900\"><strong>Add a Tech user<\/strong> to your WhenToWork company account using the existing <strong>SETTINGS &gt; Add\/Edit Managers<\/strong> page:<\/p>\n<ol>\n<li data-renderer-start-pos=\"2900\">Login from your <strong>Main Manager<\/strong> account<\/li>\n<li data-renderer-start-pos=\"2900\">Navigate to <strong>SETTINGS &gt; Add\/Edit Managers<\/strong><\/li>\n<li data-renderer-start-pos=\"2900\">Look for &#8220;<strong>Add Tech User<\/strong>&#8220;<\/li>\n<li data-renderer-start-pos=\"2900\">Provide First name, Last name and a valid email address.<\/li>\n<li data-renderer-start-pos=\"2900\">Click on &#8220;<strong>Add New<\/strong>&#8220;<\/li>\n<li data-renderer-start-pos=\"2900\">If &#8220;Email new tech user sign in instructions&#8221; is checked, login instructions will be emailed to the new tech user.<\/li>\n<\/ol>\n<h3>Sign In To Your Tech User Account<\/h3>\n<p>Sign in to your Tech user account using the WhenToWork standard <a href=\"https:\/\/whentowork.com\/logins.htm\" target=\"_blank\" rel=\"noopener\">sign in page<\/a>.<\/p>\n<p>Select the <strong>SSO tab<\/strong> under the <strong>SETTINGS<\/strong> top menu item.<\/p>\n<p>If a SSO provider is not yet enabled, click on either <strong>&#8220;Enable Okta&#8221; or &#8220;Enable Azure&#8221;<\/strong> under <strong>&#8220;Enable Single Sign On&#8221;<\/strong> which will open the &#8220;<strong>Enterprise SSO Configuration<\/strong>&#8221; page.<\/p>\n<p>This page supports all fields needed for SSO configuration; however, we recommend using the &#8220;<strong>SSO Setup Assistant<\/strong>&#8221; button which provides step-by-step instructions and incremental validation of SSO input values.<\/p>\n<p>When your reach the end of the steps in the SSO Setup Assistant, your account should be ready for the Manager to begin provisioning employees from your selected IAM.<\/p>\n<p>See the help page at <a href=\"https:\/\/when2work.com\/help\/mgr\/sso-mode-options\/\">SSO Mode Options<\/a> for information which will help you select a Mode that best suites your organization&#8217;s SSO management and user provisioning needs.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enterprise SSO SSO Start Here SSO Setup Assistant SSO Mode Options SSO Error Codes SSO Glossary IAM Emp Provisioning Single sign-on (SSO) is an authentication&#8230;<\/p>\n<div class=\"more-link-wrapper\"><a class=\"more-link\" href=\"https:\/\/when2work.com\/help\/mgr\/enterprise-sso\/\">More<span class=\"screen-reader-text\">Enterprise Single Sign-On (SSO)<\/span><\/a><\/div>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/pages\/9327"}],"collection":[{"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/comments?post=9327"}],"version-history":[{"count":48,"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/pages\/9327\/revisions"}],"predecessor-version":[{"id":10185,"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/pages\/9327\/revisions\/10185"}],"wp:attachment":[{"href":"https:\/\/when2work.com\/help\/mgr\/wp-json\/wp\/v2\/media?parent=9327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}