Initializing help system before first use

Managing Single Sign-On Users

Xpress Insight can be integrated with a third-party Identity Provider (IdP) to enable Single Sign-On (SSO) for users. When SSO is active, user account information, including authorizations, is managed by the IdP service.
Covered Topics
  • Listing, Adding and Deleting SSO Users
    Use the Admin page to view the list of user accounts recognized by Xpress Insight.
  • Managing Authorities and App Membership
    The authority groups and app membership for a user are managed by the IdP. To avoid the IdP having to directly reference the names of Insight authority groups and apps, Insight provides a mapping feature from IdP attributes to authority groups and app membership entitlements. Users with SYS_USER authorization can use this mapping to create rules based on the roles or group information in the IdP.
  • Migrating an Existing System to SSO
    There are several scenarios in which the usernames of the existing accounts in Xpress Insight do not match those in the IdP. This is a common occurrence when migrating a system that was using LDAP for authentication.
  • Development Systems and SSO
    Single Sign-On is mandatory for Insight systems configured as Production, but optional for systems configured as Development.
Parent Topic Insight 5 Administrator Guide

© 2001-2024 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.