Adding Users Using SSO Authentication

Overview

Prerequisites

• Configure the SSO Authentication service. For more information, see Configuring Tufin Orchestration Suite for Single Sign On (SSO) - Okta and Azure.

Create Users Manually

1. To add a local user, click New. The new user's properties appear.

   

   For a general explanation of the fields see Managing SecureTrack Users.

   Note the following regarding the field entries:

   • User name: User names in SSO authentication are case-insensitive and are saved as lower case. The user name entered here must be the same as the user name stored in the SSO Authentication service, otherwise the login will fail.
   • First Name, Last Name, Email Address: These fields are populated into SecureTrack from the SSO Authentication service upon authentication.
   • Administrative Alerts: This field can only be configured after a user is authenticated.

Create Users Automatically after Successful SSO Authentication

When each SSO user logs in for the first time (after clicking the SSO Authentication service button in the TOS login screen), TOS generates a matching local user account. User names are saved as lower case since user names in SSO authentication are case insensitive. The default settings for users do not have device or administrative permissions.

How Do I Get Here?

SecureTrack > Admin > Users