IDP Authentication setup

[Rob_Lewis2]

Can IDP be configured to always ask the user to enter their credentials everytime the login to OnBase?

[Jimmy_Byrne · Accepted solution]

Hello @Rob Lewis,

If a client is enabled with "Allow users to logon locally" they will always be prompted for either OnBase credentials or a provider (assuming one is configured).

 

If that option is unchecked, and another provider is configured, the user will be automatically redirected to the provider for authentication. Single sign on (SSO) by the provider is managed entirely outside of the Hyland IdS. Microsoft Entra (formerly Azure), for example, refers to this as Seamless SSO. If you want users to be prompted for authentication by a third-party provider that would need to be addressed within the provider (Entra, Okta, Ping, etc.) setup.

[AdamShaneHyland]

Also, to add to what @Jimmy Byrne mentioned, it is possible that the environment may have multiple SAML Providers (or other types as well).  When this happens, you can use the Client | Allowed Identity Providers options to select a single Provider which will allow the redirect to occur automatically.  Else, the user will be prompted.

Best wishes.