Skip to main content

IT Admin Onboarding

Provide an authentication onboarding experience for IT admins, learn how to set up single sign-on and directory sync using onboarding interface options

Before you start

There are a few essential elements to consider:

Cryptr Dashboard - Home Page

  • Organization: An organization that represents your customer. Follow ths link to learn more about Organization.
  • Redirection: A redirection also called redirect_uri is the URL to which your user will be redirected after authentication.
  • SSO Connection: To handle SSO communications between Cryptr and your customer's
    The fallback content to display on prerendering
    , you'll need to create an SSO
    The fallback content to display on prerendering
    . Follow these guides to find out more.
  • Directory Sync: To handle Directroy Synchronization between Cryptr and your customer's
    The fallback content to display on prerendering
    . You'll need to create a PROVIZ (Directory Sync)
    The fallback content to display on prerendering
    . Follow this guides to find out more.

Introduction

IT admin onboarding has been designed to provide IT administrators with a convenient and secure configuration interface via an access link, allowing them to configure an SSO and Directory Sync

The fallback content to display on prerendering
with all the necessary information and certificates.

With step-by-step instructions for each identity provider, the goal is to make it easier for IT admins to onboard their organization without third party.

Due to its simplicity, IT admin onboarding is a quick and easy solution to integrate an SSO and Directory Sync, also offering a live test at the end of the configuration.

IT Admin Onboarding

Onboarding flow

IT admin onboarding enables configuration of SSO and Directory sync

The fallback content to display on prerendering
through an interface. There are two public targets for using this: your IT admin and your customer's IT admin.

On your side, you can create the onboarding IT admin via dashboard or via our

The fallback content to display on prerendering
and invite your client's IT admin.

From your customer's side, they can receive an email to access the Admin Onboarding and then follow the configuration steps until the live test.

The access link is valid for a period of 15 minutes.

Customer Flow

note

The IT admin onboarding interface is 100% customizable, you can design it in the image of your brand. Do not hesitate to contact us for more details

Identity Providers

You will often see the term

The fallback content to display on prerendering
. This is your customer’ SSO provider.

Cryptr supports the following

The fallback content to display on prerendering
(non exhaustive list): Azure Active Directory, ADFS, Google, Okta, Ping Federate, Ping One, and many others.

Each SSO / PROVIZ user is stored in a separate

The fallback content to display on prerendering
for a dedicated client (
The fallback content to display on prerendering
). You can find the
The fallback content to display on prerendering
's
The fallback content to display on prerendering
The fallback content to display on prerendering
with the attributes
The fallback content to display on prerendering
of this
The fallback content to display on prerendering
.

1. Send an invitation to the IT Administrator of your customer

For your SSO Connection & PROVIZ Connection to be fully operational, you must ask your customer's IT Admin to finalize the setup.

To do this invite them using their email address, they will then be able to connect to our dedicated admin interface. To log in, they will need to enter their email address and click on a link contained in the email they receive.

Cryptr Dashboard - Add Admin

tip

It often happens that you don't know exactly which admin will be in charge of setup on your customer's side. That's why you can invite several Admins.

If you wish to perform these steps via API, please see our Admin Onboarding API Reference.

2. What the IT admin will see

Now that we've set up and sent the invite to your customer's IT admin, let's see an overview of the interface features they'll see.

Let's take the example of setting up an SSO

The fallback content to display on prerendering

1. IT Admin Portal

Access to this screen is only possible if the IT Admin has been invited and has clicked on the link received in their email.

We can select the integration we want to implement. Here, as we've created an SSO connection, the IT Admin can click to start the integration. However, if you haven't created a Connection, as it's the case here for Directory Sync, they can request for it to be created, directly from this screen.

IT Admin onboarding - Integrations list

A list of providers will then be displayed to the admin. They can then choose the provider that corresponds to the one they are using.

2. Step-by-step tutorial

After chosing the provider, there is a step-by-step tutorial along with the credentials needed on the right to complete the tutorials.

IT Admin onboarding - Step by step tutorial

Once the last step is reached the Connection should now be fully operational.

3. Live try

At the end of the configuration, we can preview live and see the SSO authentication or PROVIZ (Directory Sync) in action

IT Admin onboarding - Live try

More:
You can also consult our API Ref to perform these actions via the

The fallback content to display on prerendering
or if you wish to go further.