As a best practice, we recommend testing SSO in a separate private browser window with a new test user details, so you can still disable it if login is unsuccessful and troubleshoot further.
The document provides steps on how to do a test configuration with the new SSO setup.
Prerequisite
Ensure that the test user is given access to Pramata on your Identity Provider.
Test User Setup
-
Login to Pramata and navigate to User Management > Users.
-
Click on Add new user.
-
Fill the Add New User form with your test user details. Ensure that you use a test user email address which is not the same as an existing email address on Pramata.
-
Select Enable SSO login.
Note: Ensure the Username matches the user’s IDP username. -
Click Create User.
Pramata SSO Login
When a test user account is created, login via SSO by accessing the Pramata login URL. On the Pramata login page, click the Continue with <customer> IDP/Single Sign-On button. User will be redirected to IDP server and upon successful authentication, will be logged into Pramata.
Note:
-
An SSO user will not be able to use the standard username/password login.
-
IDP Initiated login is not supported.
Troubleshoot
If your Pramata Platform login was unsuccessful and your screen displays an 'Invalid Request' page, you can troubleshoot by verifying if your configurations are mapped correctly.
FAQ
- If SSO is turned on, can users who are not SSO enabled login and use credentials?
Yes, it is possible. In User Management, ensure that “SSO” is disabled for that particular user and then they can login with a username and password. - Do newly created SSO users receive a notification or a welcome email?
No, users do not receive any notifications or email when SSO is activated. - Is there a distinction between creating SSO users on an individual basis versus activating SSO users in bulk?
No, there is no difference if they are created on an individual basis or in bulk.