Managing separate login URLs per authentication type
Who is this article for?
Hub Administrators configuring Ideagen Hub access for the organisation.
Admin Console access is required
Ideagen Hub supports two authentication types: Internal (username/email and password) and External (using your corporate identity provider).
Hub can provide separate login URLs for each type, allowing user groups to access their specific login page directly. This feature is available only when signing in through Ideagen Hub.
This article explains how to set up separate login URLs for each authentication type in Ideagen Hub.
Enabling separate login URLs
Note
Before enabling separate hub login URLs, update your Communication settings. After saving, welcome emails will be re-generated with the new Login URLs based on users' authentication type.
Depending on your organisation's settings, welcome emails will be sent automatically to admins, all users, or not at all, requiring manual sending via User Management.
- Navigate to the Admin Console.
- Go to Security Center.
- Locate the Login URL configuration section.
By default, the Login URL is set to Generic. This means the Hub login screen supports both internal and external authentication. - Click the Generic link.
- Set Login type to Separate login.
- Click Save.
Note
To ensure backward compatibility, users can still use the generic Hub login URL even if your organisation has set up Separate URLs. This avoids inconvenience for those with bookmarked login pages. There is no added security risk, as a valid Ideagen Hub account is still required to sign in.
Disabling separate login URLs
You can switch back to using a generic Hub login URL at any time by disabling the option.
To disable separate login URLs:
- Navigate to the Admin Console.
- Go to Security Center.
- Locate the Login URL configuration section.
- Set Login type to Generic login.
- Click Save.
Once saved, you should observe the following:
Note
Switching back to the Generic Login URL does not stop users from accessing separate Login URLs, which remain to support those with bookmarked links. There is no added security risk, as a valid Ideagen Hub account is still required to sign in.
Verifying authentication type
To ensure that your users have the best login experience, you may want to confirm the user's authentication type.
Individual user
To confirm the authentication type for a user:
- Navigate to the Admin Console
- Go to User Management.
- Search for an individual user account you want to inspect.
- Click Edit (Pencil icon).
- Check the authentication type.
All users
To confirm the authentication type for all users:
- Navigate to the Admin Console
- Go to User Management.
- Click Export.
A CSV file will be downloaded to your device.
- Open the csv file to inspect the authentication type for the users in your organisation.
The authentication type is at the first column.
Sign-in experience
Once you have completed the configuration, your users may see a different sign in screen.
Generic login
Users using corporate ID or username and password sees a similar shared sign in screen
Separate login
Internal authentication type
Users see only the relevant username/password sign in option.
External authentication type
Users see only the relevant corporate ID sign in option.