By default, access to Content Management, Admin Centers, and private sites are controlled using a ScreenSteps username/password.
This article will explain the other Identity Provider (IDP) options you have (e.g. single sign-on) and show you where you can configure them.
Navigate to Site Access
Access to your sites and the Content Management and Admin Centers is controlled in the Site Access area.
You will see three sections:
- Content Management and Admin Centers
- Primary Site
- Other Sites
The Identity Provider (IDP) column for each of these sections allows you to customize how users log in to your ScreenSteps resources.
Do you want to modify the Identity Provider for your primary site?
Options for modifying your primary site
Note: One Identity Provider can be configured for each unique domain associated with your ScreenSteps account.
If your primary site has the same domain as the Content Management and Admin Centers, then the Identity Provider you configure for the Content Management and Admin Centers will apply to the Primary Site.
- If you want to configure a different Identity Provider for the Primary Site then configure a Vanity Domain for the Primary Site.
- All Sites appearing in the Other Sites section have a unique domain* and can have their Identity Provider configured.
* Some older ScreenSteps accounts do not have a unique domain for each site. If this is the case reach out to [email protected] so we can help you update your account to use this feature. There is no additional charge.
Edit the Identity Provider
If your primary site has the same domain as the Content Management and Admin Centers, then click the pencil icon in the Content Management and Admin Centers area. It will also apply to the published primary site.
Note: If you are setting up Single Sign-on with a third-party identity provider such as:
- Azure AD,
- Google Workspace,
then select SAML.
Which Identity Provider would you like to configure?
Select ScreenSteps username/password
- This is the default Identity Provider supplied by ScreenSteps.
- Users who log into with a ScreenSteps username/password are considered local users and their username/password will be stored in the ScreenSteps system.
Select ScreenSteps username/password from the Login through menu to use this option.
SAML is the preferred method when configuring a Single Sign-on Identity Provider with ScreenSteps. Many 3rd party Identity Providers support SAML and this will not require any additional programming from your team.
Select SAML from the Login through menu to use this option.
For detailed instructions on setting up SAML refer to the Set up Single Sign-on help article.
Select Remote Authentication
Remote Authentication is ScreenSteps specific and allows your team write code in your application to control user access to ScreenSteps. Only use this method if your system does not support SAML or if you have specific customization needs.
Select Remote Authentication from the Login through menu to use this option.
For detailed instructions on setting up Remote Authentication refer to the Set up Single Sign-on help article.
Select Account Domain
Sites can be configured to login through the Account Domain. ScreenSteps will give a user access to the site if the user has already logged in to the identity provider being used by your account domain (the domain used for the Content Mangement and Admin Centers). This can be useful if you want to share a Single Sign-on Identity Provider with your account domain. It is also useful if you wants users to be logged into any of your sites if they are logged into the account domain.
Select Account Domain from the Login through menu to use this option.