SSO + WorkFront app + external vendors | Community
Skip to main content
Level 2
November 22, 2019
Question

SSO + WorkFront app + external vendors

  • November 22, 2019
  • 16 replies
  • 2496 views
I've been troubleshooting this for one of our external vendors who really prefers to use the app for his task list. He's often setting up external events for us and is off-site frequently. The WorkFront app gave him a clean, easy-to-use task list. Then we turned on SSO for our company, and he is now locked out. This vendor is NOT an employee, and thus does not have a single-sign on log in. If he tries to use the app, it defaults to the SSO page. Is there any way I can set him up so that he can log in as an external user on the app? Our IT department will not set him up with an SSO login, because he's a contractor, not an employee. The web version just isn't as clean and useful on his Android phone. Any ideas or suggestions? He's at the worker access level. Thanks for any help you can give! Sherrie Voss Matthews Senior Manager, Internal Communication Corporate Communications & Marketing University Health System, San Antonio, TX sherrie.matthews@uhs-sa.com
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

16 replies

Level 10
January 2, 2020
To add to what Imre said--as a system admin, I would advise internals "please use/bookmark domain . my . workfront . com" (rather than /projects) since layout templates (or their own user settings) should drive them to the landing page of their team's (or other's) choice rather than them constantly going to the project page first. -skye
Level 8
January 2, 2020
If SSO is set up, adding /login will bypass the SSO redirect and take them to the Workfront login portal, and will direct them to their configured home page (either based off their user profile or a layout template if applied.) Just adding my $0.35. =) Dustin Martin Assigned Support Engineer Workfront
Level 10
January 2, 2020
hey Dustin, I'm not clear on your answer. Our SSO folks are set up to "only allow saml 2.0 authentication" -- and also don't remember their passwords, so wouldn't using /login stall them at the login portal and not direct them any further along to any home page? -skye
Level 8
January 2, 2020
Hey Skye, Adding /login will bypass SSO. Adding anything else after the .com will redirect to the SSO login portal. Dustin Martin Assigned Support Engineer Workfront
Level 4
January 3, 2020
Exactly! :) ImreMagyar VODAFONE Group
Richard_Carlson
Community Advisor
Community Advisor
January 6, 2020
To condense what was said above and confirm it, we use SSO internally, but for our external vendors we choose the "Do not require SAML authenticaion" for each user and we instruct the vendors to only use the URL I give them which is https://ourcustomname.my.workfront.com/login . Our internal users go to https://ourcustomname.my.workfront.com (without /project or anything else because that could theoretically conflict with layout templates which we use extensively). Richard Carlson Behr Paint Company Santa Ana, CA