Access Review E-Signature when SSO is enabled

[vivek9237]

We need to Enable E-Signature Using Login credential for User Manager Campaign. However, we will have SSO enabled in production. 

Question 1: How will this feature behave when SSO is enabled? Will this functionality validate against the local Saviynt credentials?

Question 2: Will E-Signature work against  AD credential when "LDAP Authentication" is enabled?

Question 3: If answer to Question 2 is yes, then can both SSO and LDAP Authentication be enabled in a tenant?

Also, let me know if there is a better way to handle this use case? Thanks.

[rushikeshvartak]

Question 1: E-Signature Behavior with SSO Enabled

When SSO (Single Sign-On) is enabled in production, E-Signature functionalities typically integrate with the SSO provider for authentication and validation. Here's how it generally behaves:

• SSO Authentication: E-Signature processes will rely on the SSO provider for user authentication. This means that the login credentials used for E-Signature will be the same as those used for accessing the system through SSO.
• Local Credentials: If SSO is configured, local Saviynt credentials are usually not used. Instead, the authentication and validation are handled by the SSO provider. The E-Signature process will authenticate users via SSO credentials.

Question 2: E-Signature with LDAP Authentication Enabled

If LDAP Authentication is enabled, it might be possible to have E-Signature work against AD credentials, depending on how your system is configured. Here’s what you need to consider:

• LDAP Integration: E-Signature can be configured to validate against LDAP/AD credentials if the system allows for LDAP integration.
• SSO and LDAP: Generally, LDAP credentials are used when SSO is not in effect or is not the primary authentication method. When SSO is enabled, the primary authentication method is SSO, and LDAP is typically used as a backup or for specific scenarios.

[vivek9237]

@rushikeshvartak do you have any Saviynt documentation handy for E-signature using SSO? Or have you tested this?

[rushikeshvartak]

Refer https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter15-Campaigns-and-Certificati...

We have not used it yet.

If you need more information on SSO add feedback on documentation portal

[sudeshjaiswal · Accepted solution]

Hello @vivek9237,

Question 1: How will this feature behave when SSO is enabled? Will this functionality validate against the local Saviynt credentials?
Currently SSO is not supported, it will only support local or user attriubute based.

Question 2: Will E-Signature work against  AD credential when "LDAP Authentication" is enabled?
Currently not supported.

Question 3: If answer to Question 2 is yes, then can both SSO and LDAP Authentication be enabled in a tenant?
SSO authenitcation is not supported.

Thanks.