Adding Users Using SSO Authentication

Overview

You can add users to TOS using SSO authentication. Upon authentication, data is imported into SecureTrack from the SSO Authentication service.

Prerequisites

Create users manually

  1. To add a new user, click New. The new user's properties appear.

    For a general explanation of the fields see Managing SecureTrack Users.

    Note the following regarding the field entries:

    • User name: User names in SSO authentication are case-insensitive and are saved as lower case. The user name entered here must be the same as the user name stored in the SSO Authentication service, otherwise the login will fail.
    • First Name, Last Name, Email Address: These fields are populated into SecureTrack from the SSO Authentication service upon authentication.
    • Administrative Alerts: This field can only be configured after a user is authenticated.

Create users automatically after successful SSO authentication

When each SSO user logs in for the first time (after clicking the SSO Authentication service button in the TOS login screen), TOS generates a matching local user account. User names are saved as lower case since user names in SSO authentication are case insensitive. The default settings for users do not have device or administrative permissions.

Automatic creation of SecureTrack users after SSO login is only possible when internal SSO is disabled. By default, internal SSO is enabled, so users must be created manually. To allow automatic user creation, disable internal SSO by running:
sudo tos config set -p tos.sso.enabled=false

How do I get here?

SecureTrack > Admin > Users