Genesys Cloud - Main

I have a quick question. We were reading over the newest release notes and noticed the SSO feature. I may have missed the process, but will this mean that even the Partner will have to use SSO to log in, I did not see that it was specific to Roles or certain users. 

adding @Megan Lima for tracking. 

Authenticate with single sign-on only

Administrators can now disable the default PureCloud login and configure PureCloud so that users must log in using a selected single sign-on (SSO) identity provider. This feature gives administrators more control over user authentication and prevents unauthorized access. For more information, see Configure PureCloud to authenticate with SSO only.

​​
#PlatformAdministration

------------------------------
Angelia Harper
Avtex
------------------------------

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget
------------------------------

Hi there Richard,

I understand your concern that an expired certificate or server failure might interrupt users' ability to access PureCloud. Please let me assure you that in the event of an SSO integration disruption, you may contact Care to disable the SSO-only setting and re-enable standard login for your users. 

Please don't hesitate to let us know if you have any other questions or concerns!

------------------------------
Becky Powell
Genesys - Employees
------------------------------

Original Message:
Sent: 02-07-2019 00:18
From: Christian Legg
Subject: Authenticate with SSO only

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget
------------------------------

Hi @Becky Powell, can you address the initial question that I posted? Does this mean that Partner will have to use SSO as well on these orgs? ​

------------------------------
Angelia Harper
Avtex
------------------------------

Original Message:
Sent: 02-07-2019 12:25
From: Becky Powell
Subject: Authenticate with SSO only

Hi there Richard,

I understand your concern that an expired certificate or server failure might interrupt users' ability to access PureCloud. Please let me assure you that in the event of an SSO integration disruption, you may contact Care to disable the SSO-only setting and re-enable standard login for your users.

Please don't hesitate to let us know if you have any other questions or concerns!

------------------------------
Becky Powell
Genesys - Employees
------------------------------


Original Message:
Sent: 02-07-2019 00:18
From: Christian Legg
Subject: Authenticate with SSO only

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget

We're also very interested in this feature but have not activated it for the reasons Christian mentions above.

------------------------------
Jason Rogers
Ontario Teacher's Pension Plan
------------------------------

Original Message:
Sent: 02-07-2019 00:18
From: Christian Legg
Subject: Authenticate with SSO only

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget
------------------------------

Hi Jason, 

There is an idea in our Product Ideas Lab for an exception list that would allow designated users to log in directly to PureCloud in order to resolve any configuration issues. It sounds like this feature would be valuable to you. 

Please follow this link to vote for and monitor this idea. 

Thank you!

------------------------------
Becky Powell
Principal Product Manager, PureCloud Open Platform
Genesys - Employees
------------------------------

Original Message:
Sent: 02-08-2019 09:32
From: Jason Rogers
Subject: Authenticate with SSO only

We're also very interested in this feature but have not activated it for the reasons Christian mentions above.

------------------------------
Jason Rogers
Ontario Teacher's Pension Plan
------------------------------


Original Message:
Sent: 02-07-2019 00:18
From: Christian Legg
Subject: Authenticate with SSO only

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget

Thanks Becky.

I have subscribed to the idea but unfortunately I can't vote for it because (I assume) I've used up some limit of votes for other ideas.
Under the number of votes I have a "0 votes left" message.

------------------------------
Jason Rogers
Ontario Teacher's Pension Plan
------------------------------

Original Message:
Sent: 02-08-2019 11:05
From: Becky Powell
Subject: Authenticate with SSO only

Hi Jason,

There is an idea in our Product Ideas Lab for an exception list that would allow designated users to log in directly to PureCloud in order to resolve any configuration issues. It sounds like this feature would be valuable to you.

Please follow this link to vote for and monitor this idea.

Thank you!

------------------------------
Becky Powell
Principal Product Manager, PureCloud Open Platform
Genesys - Employees
------------------------------


Original Message:
Sent: 02-08-2019 09:32
From: Jason Rogers
Subject: Authenticate with SSO only

We're also very interested in this feature but have not activated it for the reasons Christian mentions above.

------------------------------
Jason Rogers
Ontario Teacher's Pension Plan


Original Message:
Sent: 02-07-2019 00:18
From: Christian Legg
Subject: Authenticate with SSO only

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget

Hi, Jason,

The Ideas Lab does that on purpose--allocates you 10 votes. It requires you to decide what your top-ten most pressing issues are, so if you think this idea is more important than another you have voted for, remove your vote from that less important idea and apply it to this one.

The vote limitation helps Product Management decide what is really important to people.

------------------------------
George Ganahl CCXP, GCA
Principal Technology Consultant
Genesys
------------------------------

Original Message:
Sent: 02-08-2019 11:11
From: Jason Rogers
Subject: Authenticate with SSO only

Thanks Becky.

I have subscribed to the idea but unfortunately I can't vote for it because (I assume) I've used up some limit of votes for other ideas.
Under the number of votes I have a "0 votes left" message.

------------------------------
Jason Rogers
Ontario Teacher's Pension Plan
------------------------------


Original Message:
Sent: 02-08-2019 11:05
From: Becky Powell
Subject: Authenticate with SSO only

Hi Jason,

There is an idea in our Product Ideas Lab for an exception list that would allow designated users to log in directly to PureCloud in order to resolve any configuration issues. It sounds like this feature would be valuable to you.

Please follow this link to vote for and monitor this idea.

Thank you!

------------------------------
Becky Powell
Principal Product Manager, PureCloud Open Platform
Genesys - Employees


Original Message:
Sent: 02-08-2019 09:32
From: Jason Rogers
Subject: Authenticate with SSO only

We're also very interested in this feature but have not activated it for the reasons Christian mentions above.

------------------------------
Jason Rogers
Ontario Teacher's Pension Plan


Original Message:
Sent: 02-07-2019 00:18
From: Christian Legg
Subject: Authenticate with SSO only

While I see the merits in this, please tell me that Genesys will be able to unset this for customers, or that an Administrator account will be able to access without using SSO.

We've had two SSO shutdowns due to certificate expiry (entirely our fault) and server failure (not our fault) and on both occasions got users in through their Purecloud native accounts while the issue was being worked on, not to mention logged in as an admin to apply a new certificate.

------------------------------
Christian Legg
MyBudget

Hello Angelia, 

Once you enable the SSO-only setting, your Authorized Organizations (i.e., partners to whom you've granted access to your PureCloud org) will still be able to access your organization in the same way that they did previously. They will not need to use SSO to access your organization. 

In other words, this setting only affects the users logging in directly to the org - not those users who access your org from an external org. 

Please let me know if you have any further questions!

------------------------------
Becky Powell
Principal Product Manager, PureCloud Open Platform
Genesys - Employees
------------------------------