Is it possible to hide the SSO for customers and only allow certain groups to be able to view SSO

Question

Hey community!

I'm currently working for a client on DC and they have just enabled SSO on their instance. I'm currently wondering if it's possible to restrict the ability to view the SSO banner when logging on for new customers as my client only wants our internal users to be able to view the SSO banner?

I'm unsure if any other marketplace apps exist or if there is a simple workaround for this matter? Any help / advise will help! :)

Also this is my first post so be nice ;)

Kind Regards,

Ashley

Ste Wright · Answer

Hi @Ashley Hudson

I've done some research in relation to this, and not found a "pre-built" solution for this unfortunately.

You could certainly look for an App that might help on the Marketplace - or you might need to consider whether a custom build would work here - for example...

* Identify the user using a unique parameter
* If user is internal, redirect them to a custom SSO/platform login page (separate to the main portal), that then redirects back to the portal
* If user is external, direct them to the standard portal login page

Ste

Ashley Hudson_r44fsl · Answer

Heya @Ste Wright

So in terms of a unique parameter, there currently is not anything configured to uniquely identify the users? We could perhaps use the VPN connection to configure this but I'd love to firstly understand what you are thinking for the solution as I'm unaware of the process of customisation based on login screens via the JSM portal and how to go about that?

I was also perhaps wondering if there is a marketplace app that facilitates this customisation? If so that might be another work around to explore?

Kind Regards,

Ashley Hudson

Ste Wright · Answer

Hi @Ashley Hudson

It might be possible - it's not something you can do natively though as far as I know, it would require customisation of that specific screen/URL.

Bearing in mind that the user has not logged in at that point, you'd need some unique identifier to clarify if the user is internal or external - does a parameter like this exist? For example, IPs? VPN connections? Etc.

Ste