Part of your role as a Workplace Company Manager is to assign SSO and SAML federated websites to your users, as a way of managing company data, while also providing quick access to their work. There are three main types of accounts for the various web applications that users store in the Websites section of Workplace for easy access:
- Employee-controlled accounts
- Company-controlled accounts
- Federated websites (SAML)
First we'll discuss employee-controlled accounts.
Employee-controlled accounts indicate that the employee can control the username and password for single sign-on websites that a Company Manager, or the employee, has set up. Every SSO website created as a website available for use after the 4th of December 2018 is classified as "Employee controlled."
There are two types of employee-controlled accounts, which we'll explore under All websites.
All Websites provides a full list of websites configured for your company.
Company managers can assign an SSO website to a user by entering existing credentials provided by the employee, or by assigning credentials to the employee. The user can reveal and edit the password in the Workplace Web App.
For example, let's add LinkedIn to the list by first entering the website into the search field. When LinkedIn appears, I can then click "Employee-controlled accounts," which adds the website for the company.
Once the website is added, I can click edit website settings to modify the URL, change the category, or select which type of browser to run the website, based on the access policies of my company.
I'm going to use hosted Google Chrome by making sure to check the box Run in hosted browser only.
Now let's add some users to the website. This will allow them SSO access, where they can just click and go.
When I click Add or edit users, a grid will appear. If I have the actual user name and password, I could enter them here. If not, I can simply type the word "username,"in the identity column. By doing this, the website will appear under Websites for the users listed, and they will be able to view and edit the password in the Workplace Web App.
The other type of employee-controlled account is one that is created by an employee. They can store an SSO website in their Workplace after they login/ signup by using the browser extension to save their username and password for a particular web application. Users can share these accounts with others, change passwords from within the Workplace Web app, and delete the accounts.
In the next module of CM:103, we're going to take a dive into company-controlled accounts..