When single sign-on (SSO) is enabled in your Workfront instance, you can log into Workfront with your SSO credentials. For more information about integrating Workfront with an SSO system, see "Understanding Single Sign-On in Workfront."
- Understanding SSO Usernames
- Preparing the Import File
- Updating Users for SSO
- Verifying SSO Usernames for Workfront Users
Depending on what SSO solution you use, the username in your SSO environment can be called any of the following:
- SSO Username
- Federation ID
- Federation Username
- LDAP Username
- AD Username
- Active Directory Username
In Workfront, all these names are stored in the SSO Username field, on the user object.
In order for your users to be able to use their SSO credentials to log in to Workfront, you must update their profile to include their SSO Username, in addition to their Workfront username.
As a system administrator, you can bulk update the SSO Username field for your Workfront users by using a list of usernames and importing it in Workfront. This list must contain the Workfront User ID (GUID) as well as the corresponding SSO Username for each user. This process either updates existing SSO Usernames in Workfront, or adds a new SSO Username, if one is missing for users.
You can start preparing your import file by building a report of all users in Workfront that must have their SSO Username fields updated.
To prepare the import file:
- Build a user report in Workfront.
For more information about building user reports in Workfront, see "Creating a Report."
Select the following fields in your report:
Name: The full name of the Workfront user.
ID: The ID is the Workfront alphanumeric GUID.
SSO Username: Select the SSO Username field to ensure there are no usernames you are overwriting with your import. This field should be blank for all users, if your users have not yet been updated for SSO.
- Click Export at the top of the report and export the report to Excel.
- Open the exported Excel file, and start adding your SSO Usernames for each user in the report in the SSO Username column.
- Eliminate all columns in the Excel file, except for the ID and the SSO Username columns.
- Eliminate the column headers and ensure there are no blank rows at the top of the report.
The file you are using for updating your Workfront users with the SSO usernames must meet the following requirements:
- It should contain just two columns, in this order:
- The first column should display the Workfront user ID (the user GUID as found in Workfront).
- The second column should contain the SSO Username, as it displays in your SSO system.
- The columns should have no headers, and there should not be any empty rows at the top of the list of names.
The process of updating users for SSO either adds the SSO Username field to your Workfront users if one is not present, or updates the value for the SSO Username for your Workfront users, if there is a value already associated with the users.
To update users for SSO:
- Click Setup, in the upper-right corner of any Workfront page.
- Click System then Update Users For SSO.
- Click Choose File to browse for the file you prepared.
For more information about how to prepare the correct file, see "Preparing the Import File."
- Select the file from where it is saved on your computer.
- Click Save.
This will enable all users to log in to Workfront using their SSO credentials.
The Only Allow <SSO Configuration> Authentication setting is enabled for all users at this time.
For more information about user settings, see "Editing User Accounts."
- Run a user report with SSO Username information. For more information about building a user report with SSO Username information, see "Preparing the Import File".
- Notice that the SSO Username column is populated for each user. Ensure that the values for the SSO Username column match the SSO Username on your SSO server.
- If the SSO Username column is blank, update your users' SSO Usernames. For more information about updating your users for SSO, see "Updating Users for SSO".
DON'T DELETE, DRAFT OR HIDE THIS ARTICLE. IT IS LINKED TO THE PRODUCT, THROUGH THE CONTEXT SENSITIVE HELP LINKS. **