Aha! Ideas | Share your SSO configuration between ideas portals (Advanced plan)

Click any of the links to skip ahead:

• Add a new identity provider

• Assign your identity provider to ideas portals

• SSO user experience

• Manage identity providers in your Aha! account

Add a new identity provider

The first step is to add a new identity provider to your Aha! account. There are two ways to do this. In either case, you need to be an administrator with customizations permissions.

• Navigate to Settings ⚙️ Account Ideas Single sign-on and click on the Identity providers tab. This tab is only visible to Aha! accounts on the Advanced plan. Click Add identity provider.

• Navigate to an idea portal's settings, then Users SSO. Click the dropdown beneath SSO identity provider and select Add new provider.

Since the configuration instructions change slightly depending on the identity provider you select, you first need to name your provider and select its type.

• Name: Name your identity provider. This name will not be displayed in your ideas portal.

  This name will be shown in portal settings when selecting an SSO configuration, so we recommend that it be easily understandable like "Employees" or "Customers." Type: Choose your identity provider type. You can choose from the following providers:

• • JSON web token

  • SAML 2.0

  • OpenID Connect

Click Save to continue, then follow the steps to configure your selected identity provider. Once you are done, click Enable SSO to complete your SSO configuration.

Top

Assign your identity provider to ideas portals

If you added your identity provider through an idea portal's settings, then it will already be assigned to that idea portal. To add it to additional portals, open each portal's settings, then navigate to Users SSO. Click the dropdown beneath SSO identity provider and select the appropriate provider.

Once you select the provider you want to share, that SSO configuration will be applied to the ideas portal. Click Edit provider settings if you need to change anything. Otherwise, you are done!

Top

SSO user experience

One application in your identity provider can now be associated with many portals. So, if a user goes to that application on your identity provider's website, they will now be asked which portal they would like to visit. It is a good idea to give your ideas portals names that help your ideas portals users tell them apart.

All users with access to the identity provider will have access to all ideas portals that use that identity provider configuration.

Top

Manage identity providers in your Aha! account

From the Identity providers tab in Settings ⚙️ Account Ideas portals:

• You can see at a glance whether the identity provider is currently Enable, whether it has Support for multiple portals, and what Type it is. Click on any identity provider's Name to open its configuration. You can share any identity providers that you have configured in Aha! after February 3, 2021.

• Hover over an identity provider to Edit or Delete it.

  You can only delete identity providers if no ideas portals are using them. To do this, open an ideas portal's settings. (There is a quick link in the Ideas portals section of the identity provider's configuration page. Navigate to Users SSO and select a different identity provider.

• Each identity provider includes a section showing you a list of the ideas portal(s), if any, that are currently using the configuration. You can see the number of portals using an identity provider's configuration in the Ideas portals column and click on the number of portals to skip directly to the list of ideas portals in the identity portal configuration page.

From an identity provider's configuration page:

• Change any of the settings in the top section, then click Update SSO to save your changes. The fields in this section will change depending on the identity provider Type you selected.

• Click Delete SSO to delete the identity provider.

  You can only delete identity providers if no ideas portals are using them. To do this, open an ideas portal's settings. (There is a quick link in the Ideas portals section of the identity provider's configuration page.) Navigate to Users SSO and select a different identity provider.

• In the Ideas portals section, click on any portal's Name (or hover over it and click Edit) to open the portal's settings. Or click Open portal to open the portal itself.

• Much like integration logs, the Recent SSO events section shows you a selection of recent activity with your identity provider. These are useful to help you diagnose and resolve any issues.

Top