Managing SSO Users

SSO users need approval from a VECTR administrator before they can access VECTR. SSO users who log into VECTR for the first time will see a prompt (shown below) notifying them that an administrator will need to approve their account before they can log in.

Approving an SSO User

Any VECTR user with the ManageIAM policy can approve access requests from SSO users. To approve an SSO user:

1. Log into VECTR as an admin or user with ManageIAM policy
2. From top navigation, choose the Configuration cog in the top right VECTR Configuration and select Asset Management.

3. Locate the SSO user to approve, they are distinguishable by a person icon

   

4. Click on the hamburger icon for the corresponding user, then click Approve

   

5. On the approval screen, verify that you are approving the correct user

6. Select the groups the user should belong to
7. Click Save

Federating User Local Account to SSO Account

You can federate a user account if you have a local user configured with permissions that you want carried over to an SSO User. This can be performed when a local account and SSO account share the same username.

1. Assume that a local account for Megan B exists: Once SSO has been configured, Megan B tries to log into VECTR and is awaiting approval.

2. From top navigation, choose the Configuration cog in the top right VECTR Configuration and select Asset Management.

3. Locate the SSO user to approve and federate. You will notice a handshake icon next to the user.

   

4. Click on the hamburger icon for the corresponding user, then click Federate User

   

5. Take note of the actions that VECTR will perform on the federated user, click Federate User

   

6. Megan B's account will now be of type SSO