Adding and Managing F180 Users with SSO

We have introduced features that will help clients to troubleshoot (investigate and solve) problems when users have issues logging in to Interfolio products with Single Sign On.  

Within each of our modules, any user with the Institutional Administrator role can now go into our applications and adjust one field  - SSO ID  - whenever someone may have an issue logging into the application.

Essentially the SSO ID is simply revealing an existing field within the UI.

This is a place in-product Institutional Administrators can use users to spot-check that the proper SSO ID got passed for an individual user, and if necessary, can update SSO ID if someone is having an issue loggin in.

 

Troubleshooting SSO errors

As an F180 Institutional Administrator, editing a user at your institution who has been provisioned with an SSO ID, go to the Personal Information section of the Faculty Form by following this path as shown below:  

Administration >  Faculty Form > Personal Information > Scroll to SSO ID section

If there is no PID (personal id) associated with a user you may see an error indicating that you cannot add an SSO ID because there is no PID associated with the user you are editing.

Editing SSO ID for Support Account user:

As an Institutional Admin in F180 you can modify the SSO ID for a support account user for SSO authentication purposes at any time.

Click the Edit icon on the Manage Support Accounts page for existing support account users.

On the Support Account Form page, scroll down to Login Details.

Here you can see if the login method is managed by your school (system), or managed by F180.

If Managed by your school (System) is selected:

You will see an SSO ID field

If your institution has CAS configuration for SSO you will see “Please provide the CAS Identifier” and field labeled: “CAS - SSO ID”

If your institution has LDAP configuration for SSO, you will be asked to “Please provide the LDAP Identifier”

If your institution has Shibboleth configuration for SSO, “Please provide the Shibboleth identifier, typically EPPN or EmployeeNumber”

Editing SSO ID on Personal Information section

An Institutional Admin in F180 can modify the SSO ID for a user for SSO authentication purposes at any time.

Click the Edit icon on the Manage Faculty page for existing account users, and you will see the fields pictured below on the Faculty Form page for that user.

Note: the image below displays all configuration possibilities, but only one field should display per institutional SSO configuration. For instance, if an institution has CAS configuration for SSO, only “CAS - SSO ID” will display.

Remove SSO ID in F180

An Institutional Admin in F180 can remove the SSO ID for a user to troubleshoot a user who is having login issues with SSO.

When editing a User at your institution who has been provisioned with an SSO ID, you will see an the SSO Identifier tab within the Edit User window.

Here you will see the most recent SSO ID that is associated with the user within the SSO ID field.

Click Remove SSO ID button next to the Save button for CAS OR LDAP OR Shibboleth configurations.

This will open a window where you will confirm your decision to remove the SSO ID.

Please note: Removing an SSO ID is not recommended and may result in the user being unable to log in. Remember, you can always update a user’s SSO ID via the SSO identifier tab.