Configure "Hybrid" or "SSO Only" Single Sign-On

Single Sign-On (SSO) is a process whereby a user can gain access into Eclipse PPM after authenticating against a properly configured identity provider. Eclipse PPM and the identity provider must be configured and have established a trusted relationship before this authentication can take place. Eclipse PPM administrators can enable SSO by reaching out to an Eclipse PPM representative.

Once SSO has been enabled for Eclipse PPM, administrators can decide whether to allow "Hybrid" authentication or restrict their users to "SSO Only" authentication:

• Hybrid: Users can maintain a set of credentials within Eclipse PPM and can optionally login via these credentials. In other words, they can bypass Single Sign-On if they wish.

• SSO Only: Users can only login using Single Sign-On and will not maintain separate credentials within Eclipse PPM.

Tip: Administrators should discuss which of these options is most appropriate for their Eclipse PPM and their organization before implementing SSO.

 

Before You Start: SSO will need to be enabled for your Eclipse PPM site before either "Hybrid" or "SSO Only" can be configured.

To configure "Hybrid" or "SSO Only" Single Sign-On:

1. Select the Administration icon from the Icon Bar:

   

2. Select Single Sign-On from the "Organization" menu:

   

3. Use the "Authentication Mode" drop-down menu to determine the authentication behavior of your SSO site:

   

   • Hybrid: Users can maintain a set of credentials within Eclipse PPM and can optionally login via these credentials. In other words, they can bypass Single Sign-On if they wish.

   • SSO Only: Users can only login using Single Sign-On and will not maintain separate credentials within Eclipse PPM.

4. Select either of the Save buttons:

   

After selecting Save, the selected SSO authentication mode will be saved to your site. It can be changed at any time by following the same procedure.