Who is this article for?

Administrators who want to learn to set up their own IDP for Single Sign-On (SSO).

Hub Administrator permissions and Identity Provider portal access are required.

The conversion feature allows Administrators to transition users who currently sign in to Ideagen Hub using internal authentication (email or username and password) to authenticate with Single Sign-In (SSO) via an external Identity Provider (e.g. Microsoft Entra ID, Okta, Google Workspace).

This ensures a more secure and streamlined authentication experience for the organization, and across Ideagen Hub and integrated Ideagen solutions.

The following article explains how to convert from internal to external SSO authentication types in Ideagen Hub.

1. Benefits

There are several benefit to making the transition:

• Improved security - Leverages enterprise-grade authentication protocols.
• Seamless SSO experience - Maintains Hub User ID to ensure uninterrupted access to integrated applications.
• Scalable identity management - Aligns with organizational identity governance policies.

2. Pre-requisites

Prior to using external authentication, you must have have at least on External IDP configured for Ideagen Hub.

Refer to Configuring single sign-on (SSO) for Ideagen Hub for more information.

3. Converting the authentication type

The conversion can be performed by editing the user profile for an individual user or using the import feature for one or more users. Administrators can update the authentication type by updating the AuthenticationType value.

• To convert from internal authentication to external IDP, AuthenticationType should be updated from internal to external. 
• To convert from external IDP to internal authentication, AuthenticationType should be updated from external to internal.

3.1. User profile

To convert the authentication type:

1. Navigate to the Admin Console.
2. Select User Management.
3. Look for the user to be updated.
4. Click the Edit button (Pencil icon).
5. Open the Authentication type dropdown.
6. Select the correct value from the list.
7. Click Edit user.

3.2. User import

To convert the authentication type:

1. Export the current user list.
2. Open the downloaded CSV file.
3. Update the AuthenticationType field to the correct value.
4. Import the updated user list.