Wellbeing Hubs Clients: SSO Technical Implementation

In this article we will explain how to implement Single Sign On in your organisation and how SSO works at Kara Connect.

If your organisation is implementing Single Sign On, also know as SSO, this is the place to start with your implementation.

Please note that there may be an additional cost for Single Sign On implementation. Please check with our Customer Success Team at Kara Connect beforehand. 

What is Single Sign On (SSO)?

Single Sign-On (SSO) is a method of authentication that allows users to access multiple applications or systems with a single set of login credentials. Instead of remembering separate usernames and passwords for each application, SSO enables users to log in once and gain access to all authorised resources. It provides convenience, improves security, and enhances user experience by reducing the need for multiple login credentials.

How to start the Single Sign On Implementation?

Before you start, please review the checklist below to ensure you have all you need to start the implementation.

  1. You need to make sure you have admin rights in your organisation to enable the integration and allow Kara Connect to access your Active Directory
  2. You are using Google or Microsoft active directories. (IF you are using something else please share with our Kara Connect Implementations Team)
  3. You have global admin settings in your Active Directory tools to add or whitelist karaconnect.com as a provider.

Step one

To begin the implementation process, we need you to provide us with the following:

1- What Identity Provider your are using (Google or Microsoft)

2- Your Microsoft Entra ID Tenant / Google Identity

  • The Microsoft Entra ID Tenant- our Microsoft 365 tenant ID is a globally unique identifier (GUID) that is different than your organization name or domain. You may need this identifier when you configure OneDrive policies. Your tenant ID can be found in the Tenant ID box on the Overview page. Info here
  • A Cloud Identity or Google Workspace account- is the top-level container for users, groups, configuration, and data. A Cloud Identity or Google Workspace account is created when a company signs up for Cloud Identity or Google Workspace and corresponds to the notion of a tenant. - Info here

This means that you have successfully verified and completed the creation of your client account using your company email address and authentication service "Google or Microsoft".

If you are unable to reach to this stage please check the number "2" of this list of steps.

Step two

Our team will make the connections in our system after receiving the relevant information in "step one" and after the connections are made you will be able to test it by creating a user account and authenticating using your Directory Provider.

Our Team will be in touch with you once the integration has been completed.

Step three: Post Implementation: Testing

Once the integration has been completed by our Customer Success Specialist, it is time to test the integration.

Tip: This flow can be done directly at your own time once our team confirmed the connection has been made. Otherwise we recommend having a 10-15 calls to review the flow between you and our Customer Success Specialist team and ensure everything is working correctly,

You will be given access to the Wellbeing Hub URL. 

 

Please follow the steps below:

  1. Please go the URL that was provided by our Kara Connect Success Specialist team.
  2. Click on the button Authenticate Account / Create Account button "Create Account to Claim your credits"
  3. You will be prompt to create your account, here you can simply follow the authentication using the Directory Type your are using in your company (Google or Microsoft)
  4. At the end you will see your Client Dashboard and confirmation if the authentication worked and your account was successfully created using SSO.

If the flow is processed according to the instructions above, then it means the SSO implementation is successful and that is what your staff will experience on the account creation flow using the SSO implementation. 🎉

If you experience any issue, there may be some possible reasons that relate to your internal configuration global email and authentication settings. You need to talk to your administrator.

If you experience any issues when trying to creating your account or you can't create your account using either service "Google or Microsoft" then it means you need to fix your global email and authentication settings.

In some instances you need to allow it in your global admin account. In some cases once is allowed it automatically generate the Enterprise App named Kara.

Please check your administrator settings to ensure that Kara 

 

For more information about what users experience on the SSO flow please go here. Feel free to share these with your employees when we go live with their wellbeing hub.