Overview
Single Sign On (SSO) allows you to control access to Beyond using your own Identity Provider instead of having users log in with their TempWorks credentials.
This allows you to use your Identity Provider to enforce whatever sign in requirements you see fit, including things like multi-factor authentication, password strength requirements, or requiring the user to be logging in from a certain IP range or corporate network using corporate credentials.
Currently, SSO works with Beyond and the Outlook Add-In, and the same settings are applied to both products.
Setup
To utilize SSO, the following setup steps must be completed:
- Initial setup completed by TempWorks.
- Configure your chosen Identity Provider to enable SSO and gather information for Beyond.
- Add the Identity Provider information in Beyond and finish SSO setup.
*Note* This integration does require initial setup by TempWorks.
For more information about getting this setup, and pricing inquiries, please contact your TempWorks Account Manager.
FAQ
What is an Identity Provider?
- An Identity Provider is a service for managing user accounts that your users can log into from another application. It is a service that stores and manages digital identities.
- For an Identity Provider to be compatible with SSO, it must utilize the OAuth 2.0 protocol using OpenID Connect.
- TempWorks does not support SSO through Google Cloud Identity & Amazon Web Services (AWS) Single Sign On.
- TempWorks does not support SSO through personal Google accounts, Facebook, or other social media accounts.
- Examples of Identity Providers include:
What TempWorks products does SSO work with?
- Currently, SSO works with Beyond and the Outlook Add-In, and the same settings are applied to both products.
If SSO is enabled, can users still log in with their TempWorks credentials?
- SSO logins and TempWorks logins can be enabled separately, so it is possible to allow only SSO logins, only TempWorks logins, or to allow both.
- Enabling SSO logins does not disable TempWorks logins.
Getting Started
Once the initial setup has been completed by TempWorks, you must configure your chosen Identity Provider for SSO.
*Note* For more information on setting up the Identity Provider, please see the following article titled Single Sign On (SSO) Identity Providers.