What is Single Sign On?
Single Sign On (SSO) allows users to log in once with an external authentication provider, after which access is automatically granted to software such as Zenvoices.
As a result, a user no longer needs to log in to Zenvoices with a username and password.
Zenvoices recommends activating Single Sign On when two-step verification is not being used.
Which Single Sign On providers are supported?
Currently we support:
Microsoft
Okta
How do I activate Single Sign On?
SSO can be activated per user by enabling the option "Single Sign On" via Manage / Environment / Users / Edit and selecting the desired provider under "Single Sign On provider".
Immediately after saving the user, a connection request will be sent by email to the user’s email address.
Please note: the email is sent from Microsoft. Depending on the administrator settings in Microsoft, the administrator may need to approve that users are allowed to log in to Zenvoices via SSO.
This email contains a link that allows the user to link their account with the SSO provider to their Zenvoices account.
Repeat this action for each user for whom you want to activate SSO.
Via Manage / Environment / Users you can check in the columns "Single Sign On" and "Single Sign On linked" whether SSO is enabled for a user and whether the user has successfully linked their SSO account.
Points of attention
When logging in via SSO is enabled for a user, they can no longer log in with a password.
Two-step verification in Zenvoices is not performed when SSO is enabled for a user.
Deactivate Single Sign On
To deactivate SSO for a user and change the user back to a standard user with a password, an administrator must disable the Single Sign On option for the user via Manage / Environment / Users. The user will remain logged in, but after logging out they must enter a password on the next login attempt.
Logging in with Single Sign On
In the login screen of the web portal and mobile app the supported Single Sign On providers are displayed. Logging in via a provider is possible by clicking on the provider.
Support for multiple environments
When an external SSO account is linked to multiple Zenvoices environments, an environment selection screen will appear after logging in with the SSO provider. The desired environment can then be selected. After selecting an environment, the user will be logged in to that environment.