Skip to main content
Best Answer

Notification for a new user account by SSO to SuperAdmin?

  • March 31, 2022
  • 8 replies
  • 173 views

Forum|alt.badge.img+1

Hi! Is there a notification that will tell the SuperAdmin that a new account was created through SSO or OpenID connect?

Our authentication service holds accounts for everyone including nonemployee emails and we are using that for the OpenID Connect. 

An employee had two accounts -one with her work email and another email. She logged in with the other email and Docebo created her a new account in the system and placed her in the top branch. 

Is there a way to receive a notification (similar to when someone self registers) when this happens so I can see why the account was made and modify it or let the user know to login with a different email and delete the other one?

Best answer by TrishAH

Yes, the Notification is: 

You can configure the message and to whom it sent just as you would any other notification. I hope this helps :) 

8 replies

Bfarkas
Hero III
Forum|alt.badge.img+6
  • Hero III
  • March 31, 2022

I use the webhook “new user created” for things like this, I have it trigger a power automate flow that then sends some notifications based on criterias and updates the user data too like time zones and things. 


TrishAH
Helper II
  • Helper II
  • Answer
  • March 31, 2022

Yes, the Notification is: 

You can configure the message and to whom it sent just as you would any other notification. I hope this helps :) 


Forum|alt.badge.img+1
  • Author
  • Influencer III
  • April 1, 2022

@TrishAH and @Bfarkas thank you for your recommendations! I will try the User has been created (confirmed registration) first and if it doesn’t work, the webhook.

I had thought that notification was only for self-registered accounts because I see them in the pending users area but not for those accounts that were automatically created through the SSO/OpenID route. 


Bfarkas
Hero III
Forum|alt.badge.img+6
  • Hero III
  • April 1, 2022

@TrishAH and @Bfarkas thank you for your recommendations! I will try the User has been created (confirmed registration) first and if it doesn’t work, the webhook.

I had thought that notification was only for self-registered accounts because I see them in the pending users area but not for those accounts that were automatically created through the SSO/OpenID route. 

Yeah I believe both work, Just for full info or for others, I switched to the webhook as it included more data and I could filter when it actually notified me or control where the notice goes based on the data instead of receiving every single alert.


bevpie
Contributor III
Forum|alt.badge.img
  • Contributor III
  • April 1, 2022

@Bfarkas.I haven’t heard of this method, would you mind explaining how the webhook works? Thank you!


Bfarkas
Hero III
Forum|alt.badge.img+6
  • Hero III
  • April 1, 2022

@Bfarkas.I haven’t heard of this method, would you mind explaining how the webhook works? Thank you!

Sure, so basically webhooks are the “push” mechanism in the api world. When something in the system happens they send a message saying “hey that thing you wanted me to watch out for happened! Here’s some details about it, cheers!”

so in this case, I have a webhook in docebo from the admin menu set to run on “new user created” event. This is set to send the message to one of my power automate flows as the trigger to that flow. I then have that flow look at the information of the message and filter conditionally do different actions based on it, for example one branch looks at the users docebo branch which are offices to us and decides if the time zone makes sense for that office, and runs to update it only for about ¼ of those that come through, no one has to know it’s happening. A couple other branches of it looks at certain additional fields for certain values and sends info to system admins in various groups to do things when conditions are met. 

I am traveling and away from my work machine but can post some screen shots of examples of this early next week when home, but thought the general idea would be useful in the meantime. 


Bfarkas
Hero III
Forum|alt.badge.img+6
  • Hero III
  • April 4, 2022

@Bfarkas.I haven’t heard of this method, would you mind explaining how the webhook works? Thank you!

Here’s a quick example of this, in the below the webhook triggers from Docebo on new user creation and triggers a power automate flow to run which looks at the users information to see if he/she exists in an in house database of known designations/certifications and then if they do updates the user with them:

 


tararussell
Novice III
  • Novice III
  • March 6, 2023

@Bfarkas, this information is interesting. I’m the main LMS Admin with Docebo so my user account name is all over the audit trail events. We wish to set up a “service” account so that it doens’t reflect me but the service account as performing the actions between our SAML 2.0 for internal integration and then for the Salesforce integration. Do you know of anything like this?