Path: Workspace Homepage >> Navigation Panel >> Settings >> Security >> Authentication
| What is Workspace Authentication? |
|---|
| Workspace Authentication is the Security setting that lets a Workspace Administrator configure how members verify their identity when signing in, covering Email, Single Sign-On (SSO), SCIM, Social login, and Login Assistance. |
The Authentication setting provides several methods for members to verify their identity when accessing the workspace. A Workspace Administrator can configure Email sign-in (with optional Two-Factor Authentication), Single Sign-On (SSO), SCIM for automated identity provisioning, Social login, and Login Assistance, which controls the Contact Support link shown on the sign-in and registration pages.
Role Permissions
- Workspace Administrator: Configures Workspace Authentication settings, including Email (and its associated Two-Factor Authentication), Single Sign-On (SSO), SCIM, Social login, and the Login Assistance Contact Support link destination.
- Community Administrator: Can override the Workspace Setting to customize authentication for the community.
- Member: Authenticates using whichever method or methods the Workspace Administrator has enabled for the workspace.
Email
This method allows members to sign in to the workspace using an email address and password, making it the most straightforward form of authentication. For enhanced security, a Workspace Administrator can enable Two-Factor Authentication, adding an extra layer of protection to the sign-in process.
Help Article on Two Factor Authentication
Single Sign-On (SSO)
Single Sign-On (SSO) is a method of integrating an organization's existing user directory with the IdeaScale authentication system. Configuring SSO removes the need for members to sign in to IdeaScale using a separate set of credentials.
Help Article on Single Signon
SCIM
SCIM (System for Cross-domain Identity Management) automates the exchange of member identity data between an identity provider (IdP) and IdeaScale. It reduces administrative overhead by eliminating the need to manually create and update member accounts and groups in the workspace for SSO-connected communities. SCIM uses secure authentication methods, such as OAuth and basic authentication, to protect communication between the identity provider (IdP) and IdeaScale.
Social
A Workspace Administrator can choose from four widely used social login methods — Google, LinkedIn, Microsoft, and Apple — available in the Social Login Settings.
Help Article on Social
Login Assistance
The Contact Support link, displayed on the Workspace Login page and Workspace Registration page, can be configured by a Workspace Administrator to direct members to any email address or URL. This may include a support email address, help center page, FAQ page, or other relevant resource, such as an image. Configuring this link helps prevent dead ends for members who are locked out and need assistance.
Help Article on Login Assistance
Frequently Asked Questions
What authentication methods can a Workspace Administrator configure for the workspace?
A Workspace Administrator can configure Email sign-in (with optional Two-Factor Authentication), Single Sign-On (SSO), SCIM, Social login through Google, LinkedIn, Microsoft, or Apple, and Login Assistance for the Contact Support link.
What is the difference between SSO and SCIM?
Single Sign-On (SSO) lets members sign in to IdeaScale using their existing organizational credentials rather than a separate set of credentials. SCIM automates the creation and updating of member accounts and groups for SSO-connected communities by syncing identity data from the identity provider (IdP).
What does Two-Factor Authentication add to the Email sign-in method?
Two-Factor Authentication adds an extra layer of protection to the sign-in process for members using the Email authentication method.
What does the Login Assistance setting control?
Login Assistance controls the destination of the Contact Support link shown on the Workspace Login page and Workspace Registration page. A Workspace Administrator can point this link to a support email address, help center page, FAQ page, or other relevant resource.
Related Articles