Single Sign-On Configuration Guide

Overview

This guide outlines the steps you will follow to configure Single Sign-On (SSO) to TeamForm from your nominated Identity Provider (IdP). SSO is a feature provided with the Adaptive Security add-on and is our (and probably your) preferred authentication method, providing a higher level of security and control with lower administrative overhead.

Once configured, customer administrators have the ability to add users into authorisation groups based on their role within TeamForm. We recommend that all individuals within an organisation are members of the lowest authorisation group by default, thus enabling authenticated but read-only access to core TeamForm features.

What is TeamForm?

TeamForm has been chosen by your organisation to help leaders to plan, form and manage cross-functional teams to improve work outcomes and reduce costs.  It provides data and insight to understand if the right people are working on the right problems, who are the most relied upon teams, the cost of delivering work and what skills are most in demand. 

TeamForm users fall broadly into four categories, ‘admin’, ‘leaders’, ‘authenticated users’ and ‘reporting’.

Admin are those who help configure and manage TeamForm for your organisation.

Leaders or Power users are those involved in team leadership, planning of work or workforce planning, organisational change or workforce management.

Reporting users are those with access to TeamForm’s data and reporting pages.

Authenticated users are individuals who are part of the wider organisation, are individual contributors, or are part of a team (or teams) and will typically be read-only consumers of TeamForm modules or features known as directory. See more about user types here TeamForm Access Groups and User-Based Access Controls

It’s not complicated, but it is a multi-step process

Successfully configuring TeamForm with SSO is a straightforward but multi-step process to configure and test each party’s side of the connection. For example:

• We will provide you with a custom Entity ID and URL specific to you to configure your IdP for TeamForm

• You will provide us with details of the Signing Certificate and user authorisation groups so that we can correctly configure your TeamForm authentication

Once the SSO connection is configured, we will then ask you to test authentication to TeamForm.

IdP Configuration Guides

We support SAML, the most common standard for federated identity.

The following links outline the step-by-step process to follow for the following common IdPs:

• Azure AD

• Google GSuite, Okta, Other SAML or OAuth IdP - please contact your representative or raise a request via https://www.teamform.co/help

Related articles