Manage Single Sign-On (SSO)

This feature requires entitlement. To enable this feature, contact your Account Manager. Once the entitlement has been granted, follow the steps below. 

Enable SSO

1. Log in to your Atlas↗ account.  

2. Click the profile icon in the upper-right corner, then click on the Account Settings dropdown.
   
   

3. Select SSO from the list.
   
   

4. Click on Configure SSO to open the SSO set up page in a new tab.
   
   

5. At the lower-right of the SSO set up page, click Get Started. 
   
   

6. Select Single Sign-On. 
   
   

7. Select your identity provider, then click Next to continue. 
   
   NOTE: The steps may vary depending on the identity provider selected. In this example, Okta is selected.
   
   

8. Complete the steps specific to your chosen identity provider.

   1. Create an application in your identity provider, then click Next. 
      
      

   2. Enter the required URLs to configure connection, then click Create Connection.
      
      

   3. Click on Proceed to acknowledge connection. 
      
      

   4. Proceed in testing the connection.

9. Once done with creating connection, the domain verification will be activated. Click Domain Configuration to proceed. 
   
   

10.  Enter your domain, then click Add Domain. 
    
    

11.  Verify your domain using DNS TXT record.

    1. Copy the TXT Record Name and TXT Record Content codes. 
       
       

    2. Go to your DNS provider and add a TXT type DNS record.
       
       NOTE: The user interface may be different depending on the DNS provider.

    3. Paste the copied codes into the corresponding fields, then save the record. 

    4. After saving the record, return to the Atlas Domain Configuration page and click Verify.
       
       
        

    5. Once verified, click Done. 
       
       

12.  Click Enable Connection. 
    
    

13.  Click Proceed. 
    
    

14.  You have successfully enabled the SSO connection. 
    
    

Add User

In your identity provider, add the user's email address. After the user is successfully added, the identity provider logo will be displayed on the Provider tab of the User window.

NOTE: New SSO users are assigned the selected role upon joining the platform. Users without an assigned role may see a message directing them to contact a system administrator for role assignment.

Log In

After the connection is established and the user has been added, follow the steps below to sign in.

1. Log in to your Atlas↗ account,  then click Continue to proceed to identity provider authentication.
   
   

2. Click Next. NOTE: In this example, Okta is used to log in. 
   
   

3. Select the security method. 
   
   

4. Enter the authentication code, then click Verify.
   
   

5. Enter your password, then click Verify.
   
   

6. You have successfully logged in. 

NOTE: New SSO users are assigned the selected role upon joining the platform. Users without an assigned role may see a message directing them to contact an administrator for role assignment. To assign a role, see Assign User Role below. 

By default, users configured for SSO are redirected to their identity provider when signing in with their organization email address. The Break Glass Login feature provides an alternative sign-in method for users who are unable to access their account through Single Sign-On (SSO) or who need to sign in using their native Atlas credentials.

Use cases include:

• Recovering access after an SSO configuration issue.
• Signing in with a native Atlas account instead of SSO credentials.
• Accessing the platform when the identity provider is unavailable.

To use the Break Glass log in, go to this link: https://atlas.globalsign.com/breakglass

Assign User Role

1. Go to your active SSO connection. 

2. At the bottom of the connection, select the appropriate role for the user, then click Save Roles.

   
   
3. You have now selected a role for the user.
   
   

Delete SSO 

WARNING: Deleting the SSO connection will remove all users associated to it. This cannot be undone.

1. Go to your active SSO connection.
2. At the bottom of the connection, click Delete SSO.
   
   

3. Click Delete on pop-up page to acknowledge that all associated users will be removed in once deleted.