IDP Global Settings
Overview
This section list all different IDP Product/ Global Settings and configurations available to a customer for customizations.
Login to miniOrange admin console. Navigate to Settings icon on the top right corner of the header to view and enable any IDP global settings.
Following Settings/Configurations are for both On-premise and Cloud:
The following settings are available while configuring User account.
- Details:
When you create an account with us, these 3 keys get generated for your account required for any API Calls for user operations/ 2FA integration using APIs, etc.
- Customer Key
- Customer API Key
- Customer Token Key
You can download the Account info from the Download icon beside the Account Details.
- Languages:
- Enable Internationalization: Checking this option will enable dropdown for the Enduser to choose their languages on :- Login page, UserSignUp page. Enabling this option would allow email templates and Custom attributes in different languages.
- Customer Preferred Language: Select the preferred language from the dropdown. miniOrange Supports English, German, Spanish, Italien, Portugese. English is default language.
- User Onboarding:
The following settings are available while On-Boarding a user. You can enable 'Allow user to register' setting from Customization --> Login and Registration Branding --> Basic settings.
- Enable User Auto-Registration (A CSV list with passwords for all the uploaded users will be made available to you): By enabling this option, if you have not provided password for the users while uploading them then a password is generated automatically and assigned to the user and the users are registered. You can get a CSV list of all these users with their generated passwords.
- Enable Inline Registration for users: By enabling this option, if the user is not present in miniOrange then he will be asked to register when he tries to Single Sign-on into any application. The User will be registered in miniOrange.
- Enable sending Welcome Emails after user registration: On enabling this option, All the users after successful registration will receive an welcome email from miniOrange to their registered Email IDs
- Enable sending activation email with password reset link after user registration - On enabling this option, an activation email along with a link to reset password will be sent to all the user who have been newly registered. The User account will be activated only after following the process on the received link.
- Verify User via OTP on email after registration: You can enable this option to add a verification option before registration completion to verify user via valid email ID.
- Verify User via OTP on phone after registration: You can enable this option to add a verification option before registration completion to verify user via valid phone number.
- Enforce users to set up their 2FA Method on First Login: On enabling this option, user is prompted for his configured 2FA method on first login attempt.
- Skip Alternate Login Method (KBA) Configuration during Inline Registration: This functionality gives you a choice to ask the KBA questions during inline registration. Enable this option if you want to skip this.
- Redirect user to SSO app after registration: By default, after user signup, a user will see a default page showing thanks for registration message with a link to redirect to login page. Once you enable this option, if a user has first initiated sso request from his application and then clicked the create account link since he has no account. After successful registration, he will be redirected to his app and logged in as the user created.
- Provision User to Third -Party App before registration: There are few cases where customer has any CRM/AD or any user data store where all users are created first or need to be maintained always. So, in that case. You can enable this option to first create the user in your existing data store and then create in IDP using the unique identifier/username generated using the CRM.
- Login & Logout:
Following options are available in User Login & Logout preferences section.
- Prevent Concurrent Logins: On enabling this option, User will be able to log in to the application or IdP with only one device at a time. Multiple login from different device will not be allowed.
- Force Users to change the password on first login: On enabling this option, When a newly created user logs in for the first time, he/she is forced to change the password.
- Enable login with phone number: On enabling this option, the User can login using his phone number instead of username. Note - The Users should have unique phone numbers.
- Show IDP's Based On User Groups: Checking this option will display all the configured IDP's based on User groups. The Users can choose from which IDP he/she should be authenticated
- Enable shared user login for users: On enabling this option, you can give one set of credentials to multiple users or a group of users and they can login into the application using the same.
- Enable Single Logout: Checking this option will enable Single Logout of all SP apps configured with miniOrange as an IdP and the apps that are logged in with miniOrange. This only works for the SP Apps that support IdP initiated logout.
- Maximum Login Attempts: This is the number of unsuccessful login attempts allowed to user before disabling the user.
- Disable User Login Time Period: The disabled user will be allowed to attempt login again to IdP or his configured applications after this time period.
- Enable Session Time out: Default IDP session time out is 90 minutes. Enabling this option will override default IDP session timeout and will enable custom session time out for users.
- User Re-verification:
Checking this option will force users to re-verify themselves periodically. You can choose when users will get notified about the re-verification and also when the re-verification window will expire, after which their accounts will be disabled automatically.
- Re-verify users every (months): You can specify the number of months after which re-verification should be invoked.
- Notify Users of re-verification before (days): You can specify the number of days before which users should be notified about re-verification.
- Re-verification Period (days): You can specify the number of days after which re-verification should be invoked.
Following Settings/Configurations are only for On-premise:
- Details:
- Server Details: You can change the domain URL where the On-Premise version of IdP is hosted as shown in above screenshot.
- miniOrange cloud user account details: This is required to use SMS or Email service from miniOrange instead of configuring custom SMS or SMTP provider
- Logging: You can set the logging level of the product as shown in the screenshot below. Default logging level is ALL. You can choose from the following options and change the logging level to any of them:
- ALL
- TRACE
- DEBUG
- INFO
- WARN
- ERROR
- FATAL
- OFF
It is recommended to change it to Error for production environments for best performance. Once you save the logging level there is no need to restart the server for changes to take effect but you should not perform this operation very frequently.
Note: 1. This option is available only for Main Admin and Super Admin accounts.
2. Any changes you make here are not persisted across server restarts. You will need to edit 'WEB-INF/classes/log4j.properties' to change levels permanently.
- Login & Logout:
- Enable Integrated Windows Authentication (IWA): This option allows you to login with your Windows credentials, without having to enter a username and password.
Following Setting is accessible only for Super Admin:
- User Onboarding:
- Enable sending activation emails to customer with Passwords: Super admin can enable or disable activation emails sent to customers which contains passwords.
