Skip to content

Add Advisor to enterprise SSO role mappings #1901

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Huweey wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

Add Advisor to enterprise SSO role mappings #1901

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions docs/enterprise/tech-overview/security/sso.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,16 +27,17 @@ Before performing any setup on your side, please fill out the questionnaire belo
In order to support SSO, you need to connect your Identity Provider (IdP) to Codat. Common examples of integrating IdPs include Active Directory (AD), PingFederate or OKTA.
In your IdP, perform the following setup:

1. Set up groups corresponding to the four Codat roles (Administrator, Analyst, Onboarding, Developer) for each Codat instance you have, and add at least one test user to each group for later testing.
1. Set up one group for each [Codat role](/configure/user-management/user-roles) you want to use (Administrator, Developer, Analyst, Advisor, Onboarding) for each Codat instance you have, and add at least one test user to each group for later testing.

Send us the group name to role mappings, including ID and mapping to our roles:

| Codat role name | Your group name | Your group ID |
| :-------------- | :-------------- | :------------ |
| Administrator | | |
| Developer | | |
| Analyst | | |
| Advisor | | |
| Onboarding | | |
| Developer | | |

2. Provision an SSO app registration (or equivalent) in the IdP. This should be configured to:

Expand Down
Loading