Activate SSO and MFA in Proxuma

There is always a debate whether Single Sign-On (SSO) and Multi-Factor Authentication (MFA) can co-exist together. Well, the answer is yes! As a matter of fact, a lot of organizations enable this two authentication methods to reap both convenience and security simultaneously when logging in to their platforms.

• Understanding SSO and MFA. 
• Activating SSO and MFA to your Proxuma account.
• Login scenarios when SSO and MFA is active or deactivated.

Here are some important terms that you need to know that are discussed in this article:

• Single-Sign On (SSO)
  Allows a user to login and authenticate their identity with a single Identification. Think of having a master key where you can open multiple doors using only one key. This is a popular authentication scheme that provides users a quick and convenient way in accessing their online accounts.
  
  
• Multi-Factor Authentication (MFA)
  Compared to SSO, this authentication method allows a user to login their online accounts using multiple verification methods via the user's smartphone, biometrics, Email tokens, etc. MFA is like having a multiple locks in your door, you need to open these locks first if you need to come in.

Multi-Factor Authentication (MFA) on the other hand is an authentication method requires a users to verify their identities with different methods or devices such as mobile phones, fingerprints, or emails tokens. Verifying their identities is immediately required upon entering their correct username and password. For example, using the Microsoft Authenticator app, which generates a unique 6-digit code every 30 seconds. Failure to provide the correct unique code will make the login invalid.

Depending on your organization's requirements, you have the option to use SSO, MFA, or both. You can activate these security options whenever you need them.

To activate SSO or MFA, follow these steps:

1. Go to Setting and select SSO.⚙️
2. Activate the SSO Login toggle.🔘

3. Paste the Client ID, Tenant ID, and Client Secret which you copied from Microsoft Azure.🔍

4. Click the Save Changes button.💾

5. For added account security, enable MFA.🔒

If SSO or MFA is activated, there will be some changes you will notice in your login screen.

Here is Proxuma's login page, SSO and MFA is not enabled.

After enabling SSO, users can log in using either their Proxuma credentials or their Microsoft Account. Google and other identity providers will be added in the future.

Last, activating MFA for the first time lets you scan a QR code using either Microsoft or Google authenticator app. 

Once you've successfully added the account to your authenticator app, copy the code generated by AWSCognito and paste it on this field. This will always show up whenever you log in to your Proxuma account.

Set up Microsoft Single Sign-on and Multi-factor Authentication
A comprehensive step-by-step guide on how to set up a Microsoft Single Sign-on account when logging into Proxuma.

Create and activate new users

Onboard new customers and learn how to create these users in Proxuma once imported from Autotask.

Microsoft Single Sign-on (SSO) Login Guide
Identify the different login scenarios in Proxuma. This article will cover inactive accounts, missing licenses, and non-existing users. Additionally, this topic will explain how an account will log in to Proxuma if their SSO is enabled or disabled.

Reset passwords
Learn how to reset a password whether you're the organization's admin or user.