3.1How sign-in works
Last updated
SYNERGY Management Gateway has its own user accounts. Each account belongs to one person, is identified by an email address, and holds one or more roles. A role decides what you may do (its permissions) and which Active Directory connections you may work in. Roles are described in Chapter 11, Users, roles and permissions.
Depending on how your installation is set up, an account can sign in in one or more of these ways:
| Method | What you use | Typical use |
|---|---|---|
| Password | The account's email address and a password kept by SYNERGY Management Gateway | Small installations, administrators, break-glass access |
| Company single sign-on (SAML) | Your organisation's identity provider | Organisations with a SAML identity provider |
| OpenID Connect | Your organisation's OpenID Connect provider | Organisations using, for example, Microsoft Entra ID |
| Windows | The Windows account you are already signed in to on a domain-joined computer | Intranet users in a trusted Active Directory domain |
Single sign-on and Windows sign-in are configured by a System Admin; see Chapter 17, Single sign-on. The password method can be switched off for an individual account, in which case that person can only sign in through single sign-on.
After you prove who you are, three more things may happen before you reach the console:
- If two-factor sign-in is on for your account, or one of your roles requires it, you are asked for an authenticator code (or asked to set one up).
- If you hold more than one role, you choose the role you want to work in.
- You land on your role's default page, or on the page you were trying to open before you were asked to sign in.
Note: A brand-new installation has no accounts at all. The first administrator is created through a one-time setup page that only works from a browser on the server itself. This is described in Chapter 2, Installation and first-time setup, and briefly at the end of this chapter.
Last updated
Thank you for your feedback.