Hi. We used to sign in Docebo via SSO authentication using OKTA and used to have an integration with Workday. Now that we have migrated to a new workday instance (we were acquired by a new company who’s also using Workday) - we have not migrated the existing integration with Docebo.
Is there a way we can bypass the SSO sign in and just have the users log in directly via a URL?
Really appreciate your help.
Page 1 / 1
I think it comes down to it depends:
Do this carefully and talk it through with your IT - as it may impact other things.
You can definitely have folks login directly using the username and password for users in the system. You may need to turn off an SSO only login under a look and feel configuration.
I think it becomes a little more complex as you work with the extended enterprise...but that should get people to login with their username and password.
Logistically - you will need to send people their username and password from the system itself - via the activation email.
Until you can set up the SSO with your new workday, you can turn off the SSO and it will allow everyone to use the non-sso login process. You might need to reset passwords for everyone so that they can set a new password until your new SSO is back up.
Otherwise there really is no way to by-pass the SSO for all of your users.
Until you can set up the SSO with your new workday, you can turn off the SSO and it will allow everyone to use the non-sso login process. You might need to reset passwords for everyone so that they can set a new password until your new SSO is back up.
Otherwise there really is no way to by-pass the SSO for all of your users.
Happy New Years @Annarose.Peterson ! We must have been writing up at the same time...
I forget the setting that allows us to use it, but we can bypass SSO by going to /native to the end of our Docebo url, for example: example.docebosaas.com/native
While still having the SSO turned on, but I remember it related to a few enterprise settings and not available to everyone, so may not be an option for you. Use it for admin tasks all the time though.
Although, in this particular case it sounds like just turning it off is best since you don’t need it anyways.
I forget the setting that allows us to use it, but we can bypass SSO by going to /native to the end of our Docebo url, for example: example.docebosaas.com/native
While still having the SSO turned on, but I remember it related to a few enterprise settings and not available to everyone, so may not be an option for you. Use it for admin tasks all the time though.
Although, in this particular case it sounds like just turning it off is best since you don’t need it anyways.
Oh yeah, you are right @Bfarkas, if you are using extended enterprise with a custom domain that uses SSO, you can use that docebo native URL to sign in.
@dklinger Happy new year to you too!!
These are very helpful. Thanks to everyone who pitched in. Will definitely keep everyone posted.
@dklinger Very much agree. I’m getting IT’s support and our CSM/AM as we go through this to make sure everything aligns once we get the integration back up.
Thanks @Annarose.Peterson I knew it was a special combo of things to be on, just couldn’t remember which!
Until you can set up the SSO with your new workday, you can turn off the SSO and it will allow everyone to use the non-sso login process. You might need to reset passwords for everyone so that they can set a new password until your new SSO is back up.
Otherwise there really is no way to by-pass the SSO for all of your users.
Happy New Years @Annarose.Peterson ! We must have been writing up at the same time...
This is where I wish the community was more like a real time chat site like a discord server, this happens to me allllllllll the time.
Until you can set up the SSO with your new workday, you can turn off the SSO and it will allow everyone to use the non-sso login process. You might need to reset passwords for everyone so that they can set a new password until your new SSO is back up.
Otherwise there really is no way to by-pass the SSO for all of your users.
Happy New Years @Annarose.Peterson ! We must have been writing up at the same time...
This is where I wish the community was more like a real time chat site like a discord server, this happens to me allllllllll the time.
A Slack channel might be a solution… but I’m not sure how it could tie into this community site.
Until you can set up the SSO with your new workday, you can turn off the SSO and it will allow everyone to use the non-sso login process. You might need to reset passwords for everyone so that they can set a new password until your new SSO is back up.
Otherwise there really is no way to by-pass the SSO for all of your users.
Happy New Years @Annarose.Peterson ! We must have been writing up at the same time...
This is where I wish the community was more like a real time chat site like a discord server, this happens to me allllllllll the time.
A Slack channel might be a solution… but I’m not sure how it could tie into this community site.
It wouldn’t, different methodologies/architectures for a community is all. Pros/cons to both.
Hi all! Just wanted to let you know that this has been resolved. I also contacted Docebo HD Chat and here’s what were advised.
Under Admin Menu → SAML Manage, under SSO Behavior , select standard log in page, and check Show SSO button on login page (so users who are synced with SSO won’t be impacted).
Turned off Login Form in Configure Branding & Look - to show the standard login page.
Share native URL.
Many thanks to everyone.
All good. Keep in mind those activation emails…folks are going to know their SSO creds - not their “native” Docebo credentials