Skip to main content
Level 2
November 22, 2019
Question

SSO + WorkFront app + external vendors

  • November 22, 2019
  • 16 replies
  • 2497 views
I've been troubleshooting this for one of our external vendors who really prefers to use the app for his task list. He's often setting up external events for us and is off-site frequently. The WorkFront app gave him a clean, easy-to-use task list. Then we turned on SSO for our company, and he is now locked out. This vendor is NOT an employee, and thus does not have a single-sign on log in. If he tries to use the app, it defaults to the SSO page. Is there any way I can set him up so that he can log in as an external user on the app? Our IT department will not set him up with an SSO login, because he's a contractor, not an employee. The web version just isn't as clean and useful on his Android phone. Any ideas or suggestions? He's at the worker access level. Thanks for any help you can give! Sherrie Voss Matthews Senior Manager, Internal Communication Corporate Communications & Marketing University Health System, San Antonio, TX sherrie.matthews@uhs-sa.com
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

16 replies

Richard__Carlson
New Participant
January 6, 2020
To condense what was said above and confirm it, we use SSO internally, but for our external vendors we choose the "Do not require SAML authenticaion" for each user and we instruct the vendors to only use the URL I give them which is https://ourcustomname.my.workfront.com/login . Our internal users go to https://ourcustomname.my.workfront.com (without /project or anything else because that could theoretically conflict with layout templates which we use extensively). Richard Carlson Behr Paint Company Santa Ana, CA
Level 4
January 3, 2020
Exactly! :) ImreMagyar VODAFONE Group
Level 8
January 2, 2020
Hey Skye, Adding /login will bypass SSO. Adding anything else after the .com will redirect to the SSO login portal. Dustin Martin Assigned Support Engineer Workfront
Level 10
January 2, 2020
hey Dustin, I'm not clear on your answer. Our SSO folks are set up to "only allow saml 2.0 authentication" -- and also don't remember their passwords, so wouldn't using /login stall them at the login portal and not direct them any further along to any home page? -skye
Level 8
January 2, 2020
If SSO is set up, adding /login will bypass the SSO redirect and take them to the Workfront login portal, and will direct them to their configured home page (either based off their user profile or a layout template if applied.) Just adding my $0.35. =) Dustin Martin Assigned Support Engineer Workfront
Level 10
January 2, 2020
To add to what Imre said--as a system admin, I would advise internals "please use/bookmark domain . my . workfront . com" (rather than /projects) since layout templates (or their own user settings) should drive them to the landing page of their team's (or other's) choice rather than them constantly going to the project page first. -skye
Level 4
January 2, 2020
Hi, https://domain.my.workfront.com should be enough for internals :) Cheers, ImreMagyar VODAFONE Group
New Participant
November 26, 2019
Hi Sherrie, Just wanted to add that we use SSO internally, but have hundreds of external vendors that access our instance and we have to share a separate web address for them to be able to login. Our SSO users login to https://domain.my.workfront.com/ projects and our external users use https://domain.my.workfront.com/ login . We do run into confusion when an external user receives a Workfront email notification, because the included links drive them to our SSO address. There's currently no way to change those links, so we have to add this sort of text to every external user's update " To reply to this update, you may reply directly from your email client or login in to https://domain.my.workfront.com/login for more options." Hope this helps! Sheri Sheri Whitten
Level 2
November 26, 2019
Thanks all! I'll share this with him and see if we can get it figured out.
Level 8
November 25, 2019
Android user, can't take a screenshot, but can confirm. Buttons on the bottom show: "Sign in with SSO" "Skip" Dustin Martin Assigned Support Engineer Workfront