New article
Recently updated
Managing separate sign in URLs per authentication type
Who is this article for?
Administrators configuring Mazlan Home access for the organisation.
Admin Console access is required
Mazlan Home supports two authentication types: Internal (username/email and password) and External (using your corporate identity provider).
Mazlan Home can provide separate sign in URLs for each type, allowing user groups to access their specific sign in page directly. This feature is available only when signing in through Mazlan Home.
This article explains how to set up separate sign in URLs for each authentication type in Mazlan Home.
Enabling separate sign in URLs
Before enabling separate Mazlan Home sign in URLs, update your Communication settings. After saving, welcome emails will be re-generated with the new sign in URLs based on users' authentication type.
Depending on your organisation's settings, welcome emails will be sent automatically to admins, all users, or not at all, requiring manual sending via User Management.
To enable separate sign in URLs per authentication type:
- Navigate to the Admin Console.
- Go to Security Center.
- Locate the Login URL configuration section.
By default, the Login URL is set to Generic. This means the Mazlan Home sign in screen supports both internal and external authentication. - Click the Generic link.
- Set Login type to Separate login.
- Click Save.
Note
To ensure backward compatibility, users can still use the generic Mazlan Home login URL even if your organisation has set up Separate URLs. This avoids inconvenience for those with bookmarked login pages. There is no added security risk, as a valid Ideagen Mazlan Home account is still required to sign in.
Disabling separate sign in URLs
You can switch back to using a generic Mazlan Home sign in URL at any time by disabling the option.
To disable separate sign in URLs:
- Navigate to the Admin Console.
- Go to Security Center.
- Locate the Login URL configuration section.
- Set Login type to Generic login.
- Click Save.
Once saved, you should observe the following:
Note
Switching back to the Generic Login URL does not stop users from accessing separate Login URLs, which remain to support those with bookmarked links. There is no added security risk, as a valid Mazlan Home account is still required to sign in.
Verifying authentication type
To ensure that your users have the best sign in experience, you may want to confirm the user's authentication type.
Individual user
To confirm the authentication type for a user:
- Navigate to the Admin Console
- Go to User Management.
- Search for an individual user account you want to inspect.
- Click Edit (Pencil icon).
- Check the authentication type.
All users
To confirm the authentication type for all users:
- Navigate to the Admin Console
- Go to User Management.
- Click Export.
A CSV file will be downloaded to your device.
- Open the csv file to inspect the authentication type for the users in your organisation.
The authentication type is at the first column.
Sign-in experience
Once you have completed the configuration, your users may see a different sign in screen.
Generic login
Users using corporate ID or username and password sees a similar shared sign in screen
Separate login
Internal authentication type
Users see only the relevant username/password sign in option.
External authentication type
Users see only the relevant corporate ID sign in option.