How to Configure SSO to Assign a Security Policy

When you use single sign-on, you can configure Mazevo to assign a default security policy to new users. The policy can be assigned using attributes sent to Mazevo during the sign-in process to determine the appropriate policy for the new user.

Overview

When SSO is used for authentication, a new account is created if the user doesn't already have one.  This account will be created as a View-Only Requester unless one of the following options is configured for SSO.

Setting the default security policy for all new requester accounts

1. Navigate to Settings > Security Policies.
2. Click on the policy name to edit the policy.
3. Select Assign to New Users for Single Sign On on the Details tab to set this policy as the overall default policy. 
4. Press Save.

For all new accounts created, this policy will be used. 

Using SAML Attributes to assign a policy

SAML Attributes can be passed to Mazevo during the login process for more control over policy assignments.  These attributes can be mapped to Mazevo security policies. Mazevo will only use one attribute to determine the policy assigned to the use. However, if a user has multiple attributes, the order in which the attributes are processed is controlled by the sort order set on the attributes.

To manage the attributes and the corresponding policy assignment:

1. Navigate to Settings > Security Policies.
2. Press Manage Single Sign On.
3. Click Add SAML Attribute.
4. Enter the following data:
   1. Security Policy
   2. Attribute Name
   3. Attribute Value
5. Press Save.

To set the order SAML attributes are processed:

1. Navigate to Settings > Security Policies.
2. Press Manage Single Sign On.
3. Click Set Sort Order.
4. Drag and Drop the Policies/Attributes in the order desired.
5. Press Save.