There was a problem loading the comments.

is there a way to require specific user accounts to use SSO?

Support Portal  »  Knowledgebase  »  Viewing Article

  Print

Original Question

or Issue:

is there a way to require specific user accounts to use SSO?
My regular users have authentication set as AD/LDAP.  Currently they can login using traditional login and password, but also the SSO method.  How can I require the SSO method without restricting access to guest or external users?

Environment:

  • Product - FC Trial
  • Version - 23.242
  • Platform - Any
Steps to Reproduce:

 

 

Error or Log Message:  

Defect or

Enhancement Number:

 
Cause:  

Resolution or

Workaround:

We do not have the option to choose the authentication method based on user type. However, we can select the authentication type based on the domain associated with the account.

 

To achieve that, you can add the following flag to the `cloudconfig.php` file:

 

```
define("TONIDOCLOUD_SAML_DOMAINS_ALLOWED", "domain1.com,domain2.com");
```

 

**Location of the `cloudconfig.php` file:**

 

- **Windows:** `drive letter:\xampp\htdocs\config\cloudconfig.php`
- **Linux:** `/var/www/html/config/cloudconfig.php`

 

The specified domains should be the email domains for your internal users (full user accounts). For example:

 

```
define("TONIDOCLOUD_SAML_DOMAINS_ALLOWED", "gmail.com,yahoo.com");
```

 

By adding this flag, your internal users will be able to log in using the allowed email addresses through SSO, while external users can still log in using the default authentication method.

          82ffe3bb2e6ae7230ee78960716fd6dc27aec229310c5782bbf5cffdb630278ff394a39812b07f4b?t=c15ee65efd459490f4c6b732ce39cb1c

 

 

Notes:   

Share via

Related Articles


Self-Hosted Help Desk Software by SupportPal
© FileCloud