Mixed-mode authentication

You can configure Jive so that it allows you to use SAML SSO for some users, and forms authentication for others. The Login Entry Page settings determine the initial login page wording if you have enabled externally accessible groups, or if your community uses SAML SSO, and you have also enabled form-based authentication for non-SSO users.

Fastpath:
  • Advanced Admin Console > People > Settings > Login Settings
  • Admin Console > People > Single Sign-On, then Login Entry Page tab
  • Advanced Admin Console > People > Settings > Single Sign-On, then Login Entry Page tab

Mixed-mode authentication assumes that some of your users are provisioned from a SAML IdP, and others will be self-registered or created by another method. These two kinds of users will access the application via different login pages.

You can use the Login Entry Page settings to customize how different users experience the login page. You can use the default wording provided, or edit the wording in all the supported languages. When users access the login page, their browser settings determine which language they see.

To set up mixed-mode authentication:

  1. Set up SAML SSO as described in Configuring SSO with SAML.
  2. In the Advanced Admin Console, go to People > Settings > Login Settings.
  3. Select Enabled for Enable Form-based Login.
  4. Click Save Settings.
    This enables a dual login page since SSO users will log in differently than non-SSO users.
  5. Go to the Login Entry Configuration page:
    • Admin Console > People > Single Sign-On, then Login Entry Page tab
    • Advanced Admin Console > People > Settings > Single Sign-On, then Login Entry Page tab
  6. Provide text for each type of login.

    By default, the application shows the options as employee and non-employee, but you can customize the text to guide your users to the correct login. For more information about login entry page configuration, see Login pages.