This article aims to provide you with all information needed to manage the authentication method of existing or new company members. It will give you an overview of the prerequisites and benefits of the available authentication methods.


What is it?

A company member's authentication method determines how they need to authenticate themselves to access the Intigriti company platform. Depending on your configuration, our platform offers users multiple ways to sign in.

What do I need?

  • An Intigriti company administrator to manage and add company members.

  • An active Single-Sign On (SSO) setting. In case your SSO integration is inactive, you cannot manage the authentication method i.e. all company members will by default need to login with a password of their choice.



Existing company members

To view the authentication method of your existing company members:

  • Go to Intigriti > Admin > Company members.

  • Check the authentication column in the grid.

The company member grid

Method

Definition

Password
2FA disabled

This authentication method refers to logging in with Intigriti specific credentials.

Password
2FA enabled

This authentication method refers to logging in with Intigriti specific credentials, in combination with 2 Factor Authentication.

SSO

This authentication method refers to logging in with SSO through the chosen identify provider.

Change authentication method from password to SSO

To change the authentication method of a specific company member,

  • Open the member's sub menu.

  • Click on Enable SSO.

Changing the authentication method for a member to password

When SSO is enabled,

  • The company member will receive an email with new log-in instructions.

  • The company member will from now on be redirected to your Identity Provider page to login.

Upon the first successful login through the Identity Provider, the company member's Intigriti credentials (Password & 2FA back-up codes) will be deleted for security reasons.


Change authentication method from SSO to password

To change the authentication method of a specific company member,

  • Open the member's sub menu.

  • Click on Disable SSO.

When SSO is disabled,

  • The company member will receive an email with new log-in instructions.

  • The company member will from now on be redirected to the Intigriti login page and will need to log in with a password of their choice.

In case the company member's Intigriti credentials were deleted for security reasons, they will be requested to setup a new password of their choice.


New company members

When adding new company members via:

  • Admin > Company members > Add member.

  • Program > Members > Add member > Add new member.

Creating a new company member with either SSO or password

You can configure the authentication method of new company members via the authentication method drop down.

When authentication method Password is selected:

  • The new company member will receive an email invite to sign up i.e. register an Intigriti account.

  • The new company member's invite can be found in the Invited tab of the grid.

Beware! For security reasons email invites expire after 24 hours. Make sure to regularly check the invite status and send a new one if needed.

  • After a successful registration on the platform the new company member will be added to the members tab of the grid.

When authentication method SSO is selected:

  • The new company member will receive an email with log-in instructions.

Note: Make sure that the provided email address matches the one in your ADFS. In case of a mismatch, please reach out to our support team.

  • The new company member will immediately be added to the Members tab of the grid i.e. an account is created for them so they can immediately login to the platform via the configured identity provider.

Beware! Intigriti does not exchange user info like first name, last name, email address, avatar,... with your Identity Provider. This means some info of newly added members will remain unknown until they successfully login and complete the condensed registration flow.


Did this answer your question?