We currently have Keystyle set up for SSO login since we started with Benefits and Invoice Review. It’s terrific and makes a great user experience since it doesn’t seem like they are logging into yet another piece of software. But as we look to opening up the system for the other half of our workforce – those added to payroll but not our active directory – we’re stuck. It seems the only option is to move everyone to the Windows/EE # option, which seems a step backwards. This has to be a common scenario for many GCs - and maybe some larger subcontractors where a large number of their PR Employees are in flux.
The perfect scenario would be to have an option to pick which login option to direct an employee to. Maybe a Login Type option on the HR/PR EE to include in SSO validation or EE number which could segment users in Keystyle.
This would also be helpful giving access to an employee we've offboarded and shutdown their AD profile - we could then shift them to the EE number login.
Mary Rosenthal
| Company | Sellen Construction |
| Job Title / Role | Construction Applications Manager |
| I need it... | 3 months |
Dear Viewpoint Suggestion Box contributor;
We at Viewpoint sincerely thank you for your contribution to Suggestion Box on how we can improve Viewpoint products. While we can’t do everything at once, we rely upon your feedback to help guide the prioritization of our product improvements, and Suggestion Box is a critical tool for us to understand and prioritize our customers’ needs.
Viewpoint reviews Suggestion Box regularly for all of our products and updates statuses, adds comments, and performs various house-keeping (including deleting) as needed to ensure that Suggestion Box is maintained as a productive environment for product enhancements requests.
© 2024 Trimble Inc. All Rights Reserved. Viewpoint®, Vista™, Spectrum®, ProContractor™, Jobpac Connect™, Viewpoint Team™, Viewpoint Analytics™, Viewpoint Field View™, Viewpoint Estimating™, Viewpoint For Projects™, Viewpoint HR Management™, Viewpoint Field Management™, Viewpoint Financial Controls™, Vista Field Service™, Spectrum Service Tech™, ViewpointOne™, ProjectSight® and Trimble Construction One™ are trademarks or registered trademarks of Trimble Inc. or its affiliates in the United States and other countries. Other names and brands may be claimed as the property of others.
If you are a cloud user then you can setup employees without AD accounts with a Trimble ID. That can link to their Vista Web Portal login and offers SSO with MFA capability. We are considering this option for our employees that are not in AD.
We have the exact same situation. Up voting.
I support this request. We have a fair number of employees who are on payroll but do not have an active directory login. This feature request will allow these employees to utilize features in the HR Management Portal.
I notice this changed back to Future consideration. In that case. . .
We are in the process of setting up employees without AD or VA Profiles in our SSO program. It would be great to be able to have another way to link them to their PR profile without creating a VA Profile.
I'm picturing a field on HRRM that we could enter the SSO identifier similar to how the Windows Authentication can be used without a VA Profile. . .
I'm interested in seeing this "Shipped" Feature in action. I don't see any changes in functionality since I submitted this suggestion.
Hi, Kevin.
The trick is that currently our users (AD members) use link to Keystyle that lands them on the Hotlist landing page. In the background that link is passing their credentials through Okta. We don't log into Okta and then click a link to Keystyle.
What I want is for Keystyle to look at the Keystyle User to see if they have a Vista Profile and if they have that, treat them as an SSO. If no Vista Profile link is found, send them to the EEID login page.
Hi Mary,
Reviewing this item and just wanted to reach out since I believe we already support the behavior you're looking for. In short, you do not need to use Security Mode "4" (i.e. SSO Only) in order to have SSO behavior enabled. In mode 4, the login page is bypassed, forcing SSO (as you know). If you return to mode 1,2 or 3, you'll still be able to use SSO via Okta, as well as access the portal via normal login methods for those accessing the login page directly.
My suggestion is to try changing the login mode to something other than 4, and then trying the Okta SSO. It should work fine, and if it doesn't, contact support and my team will hop on and get to the bottom of the configuration issue.
Cheers,
Kevin
This would be very valuable for us too.
Not having this ability limits our ability to rollout Personal Updates, Time Off, Training History, and more for paid employees who do not have a Vista profile.
Yessssss!
Voted
Hi, Michael!
Our SSO is set up to validate through Okta so we don't even see the login page - when I go to our site, I land on the Hotlist page. We have a few other web-based programs that work the same way. It makes it super slick and user-friendly. In fact, most don't know what the software is they are using, just the functions that it serves them. But if we do have to switch it over, I would probably set it to be either Windows or Ee login. I find that option of selecting an option isn't very clear, especially as a new user.
I'm happy to get on a call to show you how it works on our system if my explanation isn't clear. sometimes I don't know all the technical words for working parts.
Hi Mary,
Is the issue that you don't want users to have to toggle between windows login and employee login?