◄
►

Using SSO Login for an Operator User

Describes logging into Orchestrator using Single Sign On (SSO) as an Operator user.
  • Ensure that you configured the SSO authentication in Orchestrator.
  • Ensure that you set up users, roles, and OIDC application for the SSO in your preferred IDPs.

    For more information, see Authentication.

    Note: If other authentication mechanisms fail, there must always be a native Operator Superuser as a system fallback.

To login into Orchestrator using SSO:

  1. In a Web browser, launch the Orchestrator application as an Operator user.
    Figure 1. Logging into Orchestrator
  2. Select Sign In With Your Identity Provider.
    Figure 2. Signing In with Your Identity Provider
  3. In Organization Domain, enter the domain name used for the SSO configuration and select Sign In. The IdP configured for the SSO authenticates the user and redirects the user to the configured Orchestrator URL.
    Note: Once the users log in to the Orchestrator using the SSO, they cannot log in again as native users.

    Next Steps

    • Manage Customers and Partner
    • Manage Operators
    • Configure User Account details
    • Manage Gateway pools and Gateways
    • Manage Software and Firmware images

    Additionally, in the Orchestrator home page, access the following features from the Global Navigation bar:

    • The user selects the User icon located at the top right of the screen to access the My Account page. The My Account page allows users to configure basic user information, SSH keys, and API tokens. Users can also view the current user role, associated privileges, and additional information such as version number, build number, legal and terms information, and cookie usage. For more information, see Configure User Account details.
    Figure 3. Displaying the Customer Dashboard
    • Starting with the 5.4.0 release, the In-product Contextual Help Panel with context-sensitive user assistance supported in the SD-WAN service of the Enterprise Orchestrator and as well as for the Operator and Partner levels. In the Global Navigation bar, select the Question Mark icon located at the top right of the screen to access the Support panel.

      The Support panel allows user access across all levels to helpful and important information such as Question-Based Lists (QBLs), Knowledge base links, the Ask the Community link, filing a support ticket, and other related documentation from within the Orchestrator page. This makes it easier to learn the product without requiring navigation to another site for guidance or contacting the Support Team.

      Note: By default, not all customers can view the Support Panel. You can activate this feature for a Customer by navigating to the Global Settings > Customer Configuration > Additional Configuration > Global > Feature Access page. For additional information, see Configure Customers.
      Figure 4. Displaying the Network Overview