There are two different methods of logging in to Ondexx: forms-based authentication and single sign-on (SAML authentication).
Forms-based Authentication
Forms-based Authentication is the “usual” way users access Ondexx, via username and password.
If SSO is enabled in your Ondexx Instance, forms-based authentication is the only way for external users to access Ondexx. Additionally, forms-based authentication can be explicitly turned on for SSO users by those with the appropriate permissions.
How forms-based authentication works:
- New users are invited to sites via email, and use a link to complete and submit their profile for approval.
- Users gain access upon approval, and role and groups are set
- Users sign in and create a secure password.
- Users can now log in to Ondexx with their username and password, and access sites they have been invited to.
Single Sign-on / SAML Authentication
SAML Authentication enables Single-sign on (SSO), a term that means users can log in once, and those same credentials can be reused to log into other service providers.
For example, if a user can log on to their company’s computer or email system, they can also access Ondexx without having any additional credentials or the need to log in a second time.
How Single Sign-on and SAML Authentication (New User)
- Users are authenticated by their organization’s internal system.
- New users can access Ondexx via the SSO button. This will automatically create a new account for the user – with no access to any sites.
- Users with forms-based accounts will be able to access Ondexx via the SSO button. This will change their account Authentication to “SAML,” disabling their ability to log in with forms-based authentication.
- Users can gain access to sites by:
- Applying for access to available sites
- Being invited to a site via email, automatically granting access to the site.
- Being invited to a site via email, entering a code included in the email to gain access to the site.