Single Sign-On Configuration Guide

Overview

This guide outlines the steps you will follow to configure Single Sign-On (SSO) to TeamForm from your nominated Identity Provider (IdP). SSO is a feature provided with the Adaptive Security add-on and is our (and probably your) preferred authentication method, providing a higher level of security and control with lower administrative overhead.

Once configured, customer administrators have the ability to add users into authorisation groups based on their role within TeamForm. We recommend that all individuals within an organisation are members of the lowest authorisation group by default, thus enabling authenticated but read-only access to core TeamForm features.

What is TeamForm?

TeamForm has been chosen by your organisation to help leaders to plan, form and manage cross-functional teams to improve work outcomes and reduce costs.  It provides data and insight to understand if the right people are working on the right problems, who are the most relied upon teams, the cost of delivering work and what skills are most in demand. 

TeamForm users fall broadly into two categories, ‘leaders’ and ‘authenticated users’. Leaders are those involved in team leadership, planning of work or workforce planning, organisational change or workforce management. Authenticated users are individuals who are part of the wider organisation, are individual contributors, or are part of a team (or teams) and will typically be read-only consumers of TeamForm modules or features.

It’s not complicated, but it is a multi-step process

Successfully configuring TeamForm with SSO is a straightforward but multi-step process to configure and test each party’s side of the connection. For example:

• We will provide you with a custom Entity ID and URL specific to you to configure your IdP for TeamForm

• You will provide us with details of the Signing Certificate and user authorisation groups so that we can correctly configure your TeamForm authentication

Once the SSO connection is configured, we will then ask you to test authentication to TeamForm.

IdP Configuration Guides

We support SAML, the most common standard for federated identity.

The following links outline the step-by-step process to follow for the following common IdPs:

• Azure AD

• Google GSuite, Okta, Other SAML or OAuth IdP - please contact your representative or raise a request via https://www.teamform.co/help

Related articles