Single sign-on (SSO) is a user access management and authentication service that allows users to sign in using same credentials (email ID) to access multiple estates/applications. With SSO, you can access SaaS applications such as EcoSys, HxGN Smart Build and virtual desktop based applications such as Smart 3D, Smart Materials, and SmartPlant Electrical and so on. Using SSO you can:
-
Sign in to Smart Cloud with your corporate credentials.
-
Use the same credentials to access multiple applications.
Smart Cloud uses Okta for user identity validation. You can setup SSO using a different
identity provider but in federation with Okta, that is, you can login to all Smart
Plant Applications using your organization login credentials. All the Smart Plant
applications in Smart Cloud authenticate via the same Okta instance. For example,
if you are signed in to SDx, you do not have to sign in again to access EcoSys, if
the browser session is active.
How does SSO work?
The following scenarios explain how SSO works:
-
Scenario 1: User has access to a single estate and multiple applications in the estate.
Once a user sign's in to an Estate in Smart Cloud portal, user can access all the applications in the Estate, without having to sign-in again.
-
Scenario 2: User has access to multiple estates.
For example, if a user has access to estate A and estate B, with SSO, user can access both estate A and estate B with a given login ID.
-
Scenario 3: Sign in using organization login ID.
Sign in to Smart Cloud application using login ID of their organization. For example, if the user is from XYZ company, then the user ID will be user.user1@xyz.net. For more information about using your organization ID, see Set up the federation.