Enabling and configuring SSO on Structural Cloud

Required global permission: Manage user access to Tonic Structural and to any workspace

On Structural Cloud, you enable and configure single sign-on (SSO) from Structural Settings view.

Structural Cloud currently only supports Okta, OpenID Connect (OIDC), and SAML.

Displaying the SSO configuration

To display the SSO configuration options:

1. In the Structural header, click Structural Settings.
2. On the Structural Settings view, click Access Management.
3. On the Access Management tab, click Single Sign-On.

Single Sign-On view on the Access Management tab on Structural Settings with SSO disabled

Enabling and configuring SSO

Before you enable SSO, make sure to complete the required configuration in the SSO provider.

• Okta configuration
• OIDC configuration
• SAML configuration

Enabling SSO

To enable SSO:

1. Click Edit Settings.
2. Toggle Enable SSO to the on position.

Single Sign-On view with SSO enabled

Requiring SSO for login

Before you require SSO, after you complete the rest of the connection configuration, log out and then use SSO to log in.

If you require SSO before you use SSO to log in at least once, then you will not be able to log in.

By default, users can either:

• Use SSO.
• Use their email address to create an account directly.

You can require users to only use SSO.

After you complete the connection configuration and then log in with SSO, to require your users to only use SSO, check the Require SSO for login checkbox.

Selecting the provider and configuring the connection

Click the SSO provider to use, then configure the connection to the SSO provider.

1. Okta connection
2. OIDC connection
3. SAML connection

When you are finished, click Save.

Updating the SSO configuration

To update the SSO configuration:

1. Click Edit Settings.
2. Update the configuration. You can change:

   • Whether SSO is enabled.
   • Whether to require SSO for login.
   • The connection settings for the selected provider.
3. Click Save.