SSO: Single sign-on in AB Tasty

AB Tasty lets you implement Single Sign-On (SSO) through SAML 2.0, an open standard data format for exchanging authentication and authorisation information. AB Tasty SSO feature allows you to secure your workspace and control your users' access : your team members can log in to AB Tasty using one set of sign-in credentials from existing authentication providers.
SSO is an email-level feature that will apply across all projects and experiments. 

Activating SSO in your AB Tasty account

Prerequisites

• You are able to configure an Identity Provider (IP) for AB Tasty service 
• Your Identity Providers are able to communicate with AB Tasty : some Identity Providers are limited to internal communication, which is a blocker to set up SSO with AB Tasty.
• AB Tasty manages only SP-initiated single sign-on, please ensure your Identity Provider is compatible with it.

To continue the SSO integration process on your account, please contact your CSM who will send you all the required details. After you have provided all the required information, our support team will verify the SSO integration. Once the verification is done, we will enable SSO for your account(s). Our support team will be in contact with you throughout the whole process.

SSO login

Once SSO is enabled in AB Tasty, all users will have to log in via SSO. Follow these steps to sign in to your AB Tasty account. 

👍	Once SSO login is enabled on your account, the ability to log in with an email password will be disabled meaning that you can no longer login into your AB Tasty account by manually entering the value in the password field.

1. From the login page, and click “Login with SSO”
2. Or go directly to https://app2.abtasty.com/ssologin 
3. Enter your professional email address in the email address field
4. Click “Sign-in”
5. You will be automatically redirected to your provider to authenticate. If you are already authenticated, you’ll be redirected to the AB Tasty platform.

FAQ

How can I configure SSO?

Please contact your dedicated CSM or Key Account Manager to enable SSO on your account. 

My company uses a custom Single Sign-On solution. Is AB Tasty compatible with this?

AB Tasty is compatible with any authentication solution as long as it’s a SAML 2.0. If you have any questions please reach out to [e-mail], we can help you with the integration process.

How long do SSO based sessions last?

The SSO session will expire after 8 hours of inactivity.

Once the SSO is enabled, can my company users still sign in by using an email password?

No. Once SSO is enabled on your account, the use of an email password will be disabled for all members of your organisation.

Can I add external collaborators who don’t have SSO credentials to my SSO-enabled account?
Yes. External contributors such as Partners agencies will remain able to log by using the email password method but only if they’re not using your company email address.

Can existing or new collaborators on my SSO-enabled account access the account if they don’t have SSO access through my company?

Only collaborators with SSO credentials through your organisation can access your SSO-enabled account with their corporate email address.

You can manage users’ access to your account(s), from https://app2.abtasty.com/settings/user-management. You will need to revoke access for a user in your Identity Provider as well.

If SSO is disabled, how will the users access the account? Can they start using their old email address and password?

Yes, once SSO is disabled users can use their existing email address and password to access their account. The users who haven’t set their password even once can use the “Forgot Password” link to set their password, after this they can use the email address and the new password to sign in to their account.

How do I login to my non-SSO accounts?

You will be able to login to your non-SSO accounts by entering your professional email address and password from the login. Once connected to the AB Tasty platform, you can switch from any account you have access to (SSO-enabled or non-SSO-enabled)

My company has enabled SSO, but I cannot sign in using SSO from my email id?

We recommend that you verify if your email is added as a user in the AB Tasty account. If this is done and that you are still unable to sign in, please contact [e-mail].

How do I revoke a user’s access?

You can revoke a user’s access directly in the AB Tasty platform. You’ll have to go to https://app2.abtasty.com/settings/user-management. On your hand, you will need to revoke users’ access in your Identity Provider too.