Q: How do I setup SSO with the Infigo Single Sign On plugin?
A: Please see our help centre article. It is imperative we receive all required information - if anything is missing then the configuration of SSO won't be possible.
Q: Is the SSO module included with all storefronts?
A: Not as standard. If you'd like to purchase the Infigo SSO module please submit a support ticket and the team will provide you with a quote.
Q: How long does it take to setup SSO?
A: This depends on whether all information is supplied (and is correct) when submitting an SSO ticket. Please see our SSO setup article: https://infigosoftware.zendesk.com/hc/en-us/articles/360047556691-Setup-Single-Sign-On-SSO-SAML-2-0
Q: If a user's account is disabled in the identity provider's software (their SSO tool), will the user's Infigo storefront account be set as inactive?
A: No, because SSO doesn't sync user accounts. Essentially, SSO will create the user account in Infigo (with attribute mapping) but if the user is disabled in SSO the Infigo account won't be updated.
Q: If a user's account is deleted in the identity provider's software (their SSO tool), will the user's Infigo storefront account be deleted?
A: As above.
Q: Is it possible to have some users login with SSO, and others not?
A: No; SSO is enabled at storefront 'level' and therefore everyone logging into a storefront would be required to do so with SSO.
Q: Can I log into a storefront without having an account setup with the IDP? (SSO Identity Provider)?
A: In step 2 of the SSO setup article we explain you can add "/login?originalCatfish=true" to the end of the storefront URL and it will navigate around SSO.
Q: Do we have to use the Infigo SSO module, or can we setup Single Sign On access in another way?
A: You can use an API call, however this is not supported by Infigo. If you'd like to use this method then you will need to create the connection and manage it. Alternatively, you can use our Punchout plugin.