SSO instellen
Configure SSO
Voor wie
Beheerders, medewerkers en IT-teams die ITLedger gebruiken voor dienstverlening, assets, compliance en rapportages.
Taken
Kies je taak. De volledige werkwijze, voorwaarden en aandachtspunten staan hieronder in het Engels.
Configure SSO
Enterprise SSO is an admin-owned, plan-gated WorkOS workflow under Configuration → Tenant Management → SSO. ITLedger can request setup, create or reuse the tenant's WorkOS organization, open the hosted WorkOS configuration portal, refresh connection and domain-verification state, and apply a default role plus optional group-to-role mappings. Richard should guide this UI flow; SSO secrets and provider configuration do not belong in chat.
Who can do this: Tenant administrator
Before you start
- Use an account with access to the stated page and permission for the chosen action.
Safeguards
- SSO setup is subscription-gated; the API reports both setup eligibility and paid SSO eligibility for the current tier.
- Choose one of the identity providers offered by the SSO configuration page.
- Use the hosted WorkOS portal link for provider configuration; never ask an admin to paste credentials, certificates, or secrets into Richard chat.
- The default role and every group mapping must resolve to a valid built-in or tenant permission role.
- Role synchronization can change application access after identity-provider group changes, so test with a non-admin pilot user first.
- User access, role administration, billing, and SSO remain Admin Panel operations; Richard provides guidance but must not invent a chat-side bypass.
- Go to Configuration → Tenant Management → SSO and review subscription eligibility and current connection state.
- Choose the identity provider, enter the tenant domain and identity-admin email, then request setup.
- Open the generated WorkOS portal link and complete provider configuration outside Richard chat.
- Return to ITLedger and refresh the connection state until the expected domain and connection are verified.
- Choose the default fallback role and configure only deliberate identity-provider group-to-role mappings.
- Enable role synchronization only after validating mappings and password-fallback policy.
- Test sign-in and effective permissions with a non-admin pilot account before rollout.
Expected outcome: The user has reviewed the result of configure sso in the application.
Aanbevolen werkwijze
- Leg vast wie belangrijke instellingen beheert.
- Houd organisatie- en supportgegevens actueel.
Gerelateerde handleidingen
Lees verder in Werkruimte instellen
Organisatie, supportinformatie, functies, voorkeuren en historie.