Good morning,
we are going to implement the authentication through Microsoft but we are facing following issues:
- SSO SAML Login --> it can be or "Yes" or "Not", it means that or we go for Microsoft authentication or we go for "normal" authentication. Unfortunately, not all users have a Microsoft account, so we would like to leave both possibilities.
- default profile for SAML users --> when a user who doesn't have an account yet tries to log in with his Micosoft account, a Projeqtor account is automatically created with the profile specified in "default profile for SAML users". We would like to avoid it; the expected behaviour is: if you don't have an account yet, you can't access as only specific people are expected to access.
I know that these features are not existing yet, but we would like to understand if it is possible to implement them and what would be the cost (more or less).
Thank you very much,
Kind Regard
Silvia
Hi
SSO SAML Login --> it can be or "Yes" or "Not" ... we would like to leave both possibilities.
When SSO is enalbled, authentication is delegated to SSO.
So users don't see ProjeQtOr login screen anymore, they are redirected to SSO login screen.
Before redirection, Projeqtor does not know which user tries to connect, so connot redirect depending on some user criteria.
If user is directed to SSO and does not log in, next time he requests projeqtor login page, he gets it, and is not redirected to SSO login page.
Other option : add ?nosso in the url redirects directly to projeqtor login page.
default profile for SAML users
This can be an evolution, with new parameter in SSO definition.
Please contact us through contact form if you want an estimate.