Overview:
miniOrange Single Sign-On (SSO) removes the need to repeatedly type usernames and passwords, which increases productivity and prevents many types of online fraud that is caused by using same or similar passwords across apps, tying in passwords in un-safe environments, password sharing etc. By enabling users to quickly and securely access applications, they can spend less time with technology and more time with their work.
Enterprise users regularly need to remember eight or more application passwords. Security best practices require those passwords be unique, strong and frequently changed. It’s no wonder enterprise users write them down, stick them to the monitor or just forget them.
miniOrange Single Sign-On (SSO) addresses these challenges by significantly reducing clicks and eliminating the need to remember or enter application usernames and passwords.
Why Credential Vault?
miniOrange provides two kinds of applications: one which supports SAML protocol and other which does not support SAML protocol for SSO. For the applications which do not support SAML protocol, we have Credential Vault technology to configure user credentials and single sign-on to the desired apps. Credential Vault lets you configure username and password of an application securely with miniOrange and single sign on to them. SSO for credential vault is managed using a browser extension. There are three different ways to configure user credentials under this technology depending on whether the administrator would like users configuring credentials for one or multiple users from belonging to same group; or the administrator would like the user to visit the user dashboard of miniOrange platform to configure apps or do it from their own site.
Configuring Credentials:
- Individual Login Account
This method could be used regardless of single or multiple user credential configuration; social or enterprise apps.
Desired apps could be added from the Apps section and the user can configure the apps through the User Dashboard. Click here to see the step-wise guide to configure credentials using this method.
This method is generally used in a scenario when you want to Single Sign-On to any app be it Facebook or Office365 and is ideal for individual login account.
- Shared Login Account
For enterprise apps, a more secure method could be used in which the administrator sets the user credentials and user can sign-on to the apps without knowing the credentials. Users do not have an option to configure the credentials on their own.
Each app could be configured by the administrator for setting default credentials for the user(s) from Edit App section. Click here to see the step-wise guide to configure credentials using this method.
For example, when the employees working in the same department use a common app and the administrator wants to provide sso to the employee without disclosing the credentials to them in this way the control stays with the administrator.
- Bulk Upload
The third method is useful for another case of usage of enterprise apps where administrator can add credentials for multiple users.
Bulk upload of credentials can be done from Add User Credentials section. Click here to see the step-wise guide to configure credentials using this method.
Let suppose if a firm has a marketing team which uses a specific app, their credentials could be filled in a sheet by the administrator. This sheet when uploaded makes it easy for configuring the app for the whole team at one go.
Single Sign-On to Apps:
After having configured the apps, there are two locations from where users can single sign-on to the apps: one is to have user visit the User Dashboard on the miniOrange platform and select the app they want to single sign-on to, or SSO externally.
- Single Sign-On from User Dashboard
This step is simple. The user can select the app they would want to single sign-on to from User Dashboard.
- Single Sign-On Externally
For the second option, each app has a unique link on the miniOrange platform. The administrator could provide this link to the users on one's own website/application so that the users need not visit the User Dashboard and could directly sign-in to their desired app at their convenience. This saves the user from understanding the miniOrange platform to reach User Dashboard just to sign-on to apps.
Click here to check the guide for both the ways of SSO to apps.
Step-wise guide to Configuring Apps and SSO to Apps:
We have given the step by step guide to configure any application Single Sign On using Credential Vault. Here we have taken Dropbox as an example.
Follow the Step-by-Step Guide given below to configure Dropbox Single Sign-On(SSO):
Step 1: Add Dropbox through the Admin console
- Login as a customer from Admin Console of miniOrange's Administrator Console, now go to Apps Tab from menu and click Manage Apps.
- Now, click on Configure Apps.
- Under the section Browser Plugin, select Dropbox and click on Add Apps.
- Select group name from the Group Name dropdown list and click on Save.
Step 2: Configure Single Sign On (SSO) Settings for Dropbox App
- Now, click the user icon and select User Dashboard from the dropdown menu.
- From the Configure your cloud apps section select
for Dropbox App and select Configure.
- Fill up Username and Password. Select
to add multiple accounts and click on Save to complete the configuration.
For configuring credentials on behalf of the users, the second method comes in handy. It sets the default credentials for the user and the user doesn't need to configure the credentials by self. Here, we have taken Amazon as an example.
Follow the Step-by-Step Guide given below to configure Amazon Single Sign-On(SSO):
Step 1: Configure Amazon through the Admin console
- After selecting Manage Apps from Apps, click on Edit.
- Select Shared Login Account in Edit Application dialog box and fill username and password fields for user and click on Save.
Next, we have provided a guide below for configuring apps with credentials of multiple users.This method is useful in a scenario when the administrator knows the credentials of the employees working in the same firm and have to configure an app used by all of them.
Follow the Step-by-Step Guide given below to configure Amazon Single Sign-On(SSO):
Step 1: Configure Amazon through the Admin console
- Download the sample .csv file, edit and uploaded in Add User Credentials section available through Manage Apps option.
Single Sign-On to your App:
1.Single Sign On to Dropbox through User Dashboard:
- Click on Dropbox App icon in User Dashboard section.
In case a pop-up message for 'Extension Missing' appears, Click here to know more about how to download the specific browser extension for each web browser.
- The user's credentials are filled in Dropbox login page using browser extension and user gets logged into Dropbox.
2.Single Sign On to Amazon externally:
- Go to View Apps section from Apps and click on Link to view the View Link.
This link can be used by the service provider in their website to directly Single Sign-On to the app.
How to enable the browser extension?
Chrome :
- Open a new tab
- On the address bar, type "chrome://extensions"
- Among the listed extensions, search for "miniOrange Secure Single Sign-On Plug-in"
- Check the Enable checkbox on the right side
Firefox :
- Open a new tab
- On the address bar, type "about:addons"
- Among the listed extensions, search for "miniOrange Secure Single Sign-On Plug-in"
- Click on the Enable button
Safari :
- On the menu bar, click on Safari -> Preferences -> Extensions
- On the left side where the extensions are listed, click on miniOrange extension
- Check the Enable miniOrange Secure Single Sign-On Plug-in checkbox
