SSO Federation simplifies enterprise access management by automatically provisioning user accounts when individuals authenticate through their company’s Identity Provider (IdP). This functionality reduces administrative overhead and streamlines onboarding while maintaining secure, role-based access to the Quality Clouds platform.

Feature Summary #

SSO Federation allows organizations to:

• Automatically create user accounts upon successful login via SSO.
• Ensure consistent identity and access management aligned with corporate policies.
• Assign default roles and platform-specific views to new users without manual intervention.

This capability is ideal for organizations managing a large user base through a centralized IdP.

How It Works #

1. Activation #

To enable SSO Federation for your organization, please contact the Quality Clouds support team. Only the support team can activate or deactivate this feature.

2. Automatic User Creation #

Once SSO Federation is active:

• Any employee authenticating via the company’s IdP will automatically have a user account created in Quality Clouds if one does not already exist.
• There is no need for manual user creation or invitation by an admin.

3. Default Role Assignment #

Newly created users via SSO are assigned the Normal User role by default, which grants appropriate access to platform features while restricting administrative permissions.

4. User Metadata Collection #

During account creation, the following user metadata is automatically captured and stored:

• Email address
• First name
• Last name

This ensures user identity is traceable and consistent with corporate records.

5. Platform Access Views #

Upon account creation, users are provisioned with platform-specific views based on your organization’s subscription:

• Profiling View: Granted for each supported platform (e.g., ServiceNow, Salesforce).
• Executive View: Granted for Office 365 environments.

6. Onboarding Flow #

New users logging in via SSO for the first time will experience the following flow:

• Authenticate through the corporate IdP.
• Be redirected to the Quality Clouds Terms and Conditions page.
• Once accepted, the user is automatically redirected to the BI Dashboard, ready to start using the platform.

Edge Case Handling #

Recreation of Removed Users #

If a user was previously removed from Quality Clouds but still exists in the corporate IdP:

• Their account will be automatically recreated upon next login via SSO.
• Applies to both manually deleted users and those removed due to inactivity.

Inactive Accounts #

If a user’s account has been manually deactivated in Quality Clouds, they will not be able to access the platform via SSO. Instead, the following error will be shown:

“Authentication error. If you are experiencing login issues, please contact your administrator.”

Existing Users Without SSO #

If a user’s account exists in Quality Clouds but SSO is not enabled for them:

• Login attempts via SSO will be blocked.
• The same error message will appear as above.

Access Control #

• Only the Quality Clouds support team can enable or disable SSO Federation for your organization.
• Users created via SSO do not receive admin privileges by default.
• Admin roles must be assigned manually by existing system administrators.

Need Help? #

For activation or further questions, please reach out to help@qualityclouds.com or contact your Quality Clouds Customer Success Manager.