Although Workfront supports the integration with a single sign-on system, it is outside of the scope of Workfront Support and the Workfront Customer Care staff to assist in the configuration of your internal authentication system.
This section provides an overview of Single Sign-On in Workfront.
Understanding Single Sign-On in Workfront
Most organizations utilize multiple online applications that require a user name and password to access. It is often difficult for a user to remember all of the different names and passwords, especially when the applications require password resets at different intervals.
System administrators could spend several hours setting up new users, managing forgotten passwords, deactivating users, and so forth, all across multiple applications.
Workfront provides a centrally managed Single Sign-On (SSO) configuration that easily integrates Workfront with your existing corporate SSO solution. SSO is easy to set up and manage, and is available to both OnDemand and OnPremise Enterprise customers.
In order to use the SSO functionality in Workfront, your organization needs to setup an SSO application, such as LDAP or Active Directory. You can then configure Workfront so that it can communicate with your SSO solution.
Federated solutions allow users to log in to all their applications by entering their user name and password in a centralized login portal.
When using Active Directory and LDAP, Workfront initiates a connection to your server on the specified port.
If you subscribe to Workfront on-demand, and if you have configured your firewall or mail server in such a way as to allow access only to specific vendors, you need to add certain Workfront IP addresses to your firewall whitelist, as described in "Configuring Your Firewall."
Workfront integrates with the following SSO solutions:
For more information about integrating Workfront with LDAP, see "Configuring Workfront with LDAP."
- Active Directory
For more information about integrating Workfront with Active Directory, see "Configuring Workfront with Active Directory."
- Other federated solutions that support SAML 1.1.
For more information about integrating Workfront with SAML 1.1, see "Configuring Workfront with SAML 1.1."
- Other federated solutions that support SAML 2.0.
For more information about integrating Workfront with SAML 2.0, see "Configuring Workfront with SAML 2.0."
- Other federated solutions that support SAML 2.0 using ADFS.
For more information about integrating Workfront with SAML 2.0 using ADFS, see "Configuring Workfront with SAML 2.0 Using ADFS."