How do I support standard authentication users with Single Sign On enabled?

Question

How do I support standard authentication users with Single Sign On enabled?

Answer

Background

When you enable Single Sign On (SSO) in any web-based system like Pacific Timesheet, there might be scenarios where you want to allow users non-SSO access to the system. When a Pacific Timesheet logs in using his login name and password (instead of SSO) this is called standard authentication.

Pacific Timesheet requires you to setup each user account login with a login name. However, you not required to set a password for user. You can make some minor system changes to allow these non-SSO users to manage to use and manage their password. This article covers setting this up for these non-SSO users.

Single Sign On Login Setup

Whether you are using Azure AD, Okta, OneLogin or another SSO tool, your Pacific Timesheet login page will always allow two methods for a user to authenticate:

• A blue button labeled with your SSO identity provider. In example below, Okta is the SSO provider.
• A login name and password edit boxes to login using Pacific Timesheet's standard authentication.

The Login Name / Password is meant for users not setup in your Active Directory or identity provider, but who still have a Pacific Timesheet user account and need access to the system.

System setup

To configure your system for non-SSO users:

1. Login as a System Administrator.
2. Navigate to your Pacific Timesheet Home page.
3. On the far right side of the Announcements area, click on the Edit button.
4. You might have other general announcements about user deadlines, etc. here.
5. Find a new area below these announcements and using the built-in editor entering the following text: "Forgot your password? Are you a new user?"
6. Then, highlight/mark the text with your mouse.
7.  Keeping the text highlighted, move to and click on the "Insert Link" icon on the far right of the editor. 
   
8. A Link editor dialog will display:
   
9. In the URL edit box, enter this link:
   https://subdomainname.pacifictimesheet.com/timesheet/auth/password-request-form.do
   Replacing subdomainname with the subdomain of your Pacific Timesheet system, so it looks like this:
   https://acmetrucking.pacifictimesheet.com/timesheet/auth/password-request-form.do
10. Click OK to save your edits.
11. Click OK in the upper right of the Announcements area to save your changes. 

You are now ready to have non-SSO users use your Pacific Timesheet system. 

New users scenario

If you have a new non-SSO user, setup a user account in Pacific Timesheet. Be sure to setup this user account with:

• Login Name.
• Email address (these user's will need an email address to use the forgot password feature.

Then send them an email with these instructions:

<email text begins>

A new user account has been setup for you in Pacific Timesheet. Use these instructions to access Pacific Timesheet and manage your password: 

1. Click on this link to access Pacific Timesheet's Home page:
   [Insert your Pacific Timesheet system URL]
2. In the Announcements area of the Home page, click on
   Forgot your password? Are you a new user?
3. You will be taken to page where you can set your password.
   
   
4. Enter your login name, email address or employee ID and click OK
5. The system will send you an email with randomly-generated password
6. Go to your email and copy the new password
7. Go back to the Pacific Timesheet Home page
8. Click on the Show/Hide button to display the Login for your Application Account
   
9. Enter your login name and new password and click the Login button
   
10. The system will prompt you to reset your password
11. Enter your new password and click OK to finish your logging in
12. Store your new password someplace secure for safekeeping.
13. If you forget your password, click on the Forgot your password? link in the announcements area to rest your password

<email text ends>

Password administration

If these users contact you to reset their password, reinforce their using this feature with a response like:

You can use the Forgot your password? Are you a new user? link in the Announcements area of the Home page to reset your password anytime 24/7.