Versions Compared

Old Version 17

changes.mady.by.user Kiuwan Editor User

Saved on

compared with

New Version 18

changes.mady.by.user Kiuwan Editor User

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You can find details on how to set up here 


Single Sign-on (SSO) with SAML 2.0

...

At this moment, you should have received an email with an activation code as well as Domain Id and Login URL. Enter the activation code and click Activate SSO button.


Note: See How to login at Kiuwan in a Web SSO scenario on how to use the loign URL.


Info
  • If you want to avoid currently existing Kiuwan users to login using former credentials (username and password), check Disable login with password for all my users. By checking this option, all the users will be forced to login through SSO (using the provided URL).
  • If you don’t check that option, existing users can still login using user/password, but using the new URL. Older Kiuwan URL will not work any more because all the users have been migrated to SSO.

 

IMPORTANT: Is your users are using Kiuwan Local Analyzer, DO NOT CHECK THIS OPTION, because all the users will be forced to use SSO. Because KLA still does not fully support SSO, if checked you will need to manually activate user/password auth for all KLA’s users !!

 

Admin users can ALWAYS login both ways. Other users can be managed individually as using Kiuwan auth or SSO (see User management).

...

Info

First time you login at Kiuwan in SSO-mode, you need to specify the full URL such as:

https://www.kiuwan.com/saas/web/login.html?sso=on&domain=2601c4a3965935dd5b6dcb3aae45cc5f7421736bc355f114a4eb6ced00c6875a2b123b5a902aa8872921431f9a9a6a68e1886e99cde1214b78609077b79e1fdf


 

Please note that, once SSO has been activated, the login URL must specify both sso and domain parameters. 

 

  • sso=on will make Kiuwan to authenticate against the configured IdP
  • sso=off will make Kiuwan to authenticate locally, so login page will ask for credentials and will check them against kiuwan database (obviously this process will only work for users that are allowed to login with kiuwan passwords, see SSO login vs username-passwordl ogin)

 

If you don't specify sso, it defaults to off.

 

 

Most commonly, in a SSO environment you will access Kiuwan from an existing link in a corporate intranet page, so the Kiuwan URL should be changed to it and you will not need to type manually such url.

...