With SSO, you can log into Storable Edge - and eventually all Storable applications - with a single user account instead of separate logins per app or facility. A new SSO dashboard has been created for this purpose, including Multi-Factor Authentication for enhanced security.

We recommend the following before enabling SSO:

• Read our SSO FAQ. Please note once SSO is turned on for your organization, it will be enabled for all facilities on your account and cannot be turned off.
• Communicate with your organization about the upcoming changes.
• Ensure a role with access to your software is assigned as the default. If the Minimal Access Role is your default, you can change that role's permissions or assign a different role as the default.

How to enable SSO

To enable and configure SSO for your account, log in to Storable Edge as you normally would. At the Corporate level of your software, click the Settings tab. Then, click User Settings.

You’ll see a banner at the top of the page. Click Enable SSO from the banner. Then, log out of your software.

Log back into your software. You will see the following prompt after entering your login credentials.

1. If you’re ready to proceed with SSO, click the checkbox for I confirm that I can set up SSO for my company, then click Continue.
2. Select I Do Not Have an SSO User Account.
3. Enter your login details (username/email, password, and confirm password).   The username must be a valid email address. Each username must be unique within your organization. Passwords require at least one letter, one number, one special character, and at least 12 characters. Per PCI DSS requirements, passwords must be changed every 90 days.   Below the Login Details, enter your Profile Information (first name, last name, security question, and answer) and click Create User Account.
4. On the next screen, you’ll see a success message. Click Continue.
5. Enter your login credentials and click Continue.

6. Choose your Multi-Factor Authentication. Options may vary depending on your account settings: Okta Verify Authenticator App (such as Google Authenticator, Microsoft Authenticator, or Authy) Email Authentication SMS Authentication Security Key or Biometric Authentication Click Setup under your preferred option and proceed with the instructions. Instructions on how to set up each MFA method are in our article: How do I set up Multi-Factor Authentication (MFA)? Note: You are able to set the MFA challenge frequency to 7, 14 (default), 30, or 90 days.   7. Click Finish when you have completed MFA setup.

8. You will be notified that your old Edge username has been replaced with your new SSO User Account(your email address). Click Go to Onboarding Wizard to configure SSO for your organization.

9. Click Get Started from the Welcome message.

Onboarding Wizard

Step 1. Onboarding Overview

Click Continue from the Onboarding Overview when you are ready to proceed.

Step 2. Select your User Settings

• Allowed Username Domains - Select Yes or No to require all users on your account to set up a username that ends in the same specific domain. For instance, you can require all usernames to end with @yourdomain. If you select Yes, you can enter a single or multiple domains. To add domains, enter the domain and press Enter.

• 

• 
• Shared emails - All users will need to have an email address associated with their account. In this section, you will specify whether users will have a unique email address or if they can use shared email addresses. We know that many organizations use shared facility email addresses for their employees; however, we recommend giving each user an individual company email.

Users with shared email addresses will have the following limitations:

• Each employee who shares an email address will need to create a unique username. The username doesn’t have to be a valid email but must be formatted as an email address (Ex: john.doe@yourcompany.com). We recommend identifying the username format you wish your employees to use.
• Employees with a shared email may not be able to reset their own passwords via email and may be required to contact an admin user to get a temporary password.
• If employees with a shared email make too many login attempts, they will be required to contact an admin to unlock their account.

Click Submit once you have made your selections. 

Step 3: Security Settings

• Lock out policy - Choose whether or not users should be locked out of the system after a certain number of failed login attempts. If you choose Yes, select the maximum number of failed attempts (between 1 and 10).

• Multi-Factor Authentication Methods - Select which MFA methods you will allow. You can select one or more of these options. 

Click Submit to proceed.

Step 4: Configure SSO Enablement 

A. If you’re ready to continue with user configuration, select whether SSO should be optional or required for current users on your account. New users will be required to use SSO with either option. Please note: Once you make SSO required, you cannot make it optional. 

• Optional: Users can skip using SSO to sign into Edge. Please note that users will be prompted to set up their SSO User Account at each login but can skip it. New users will be required to use SSO.
• Required: Users must use SSO to sign into Edge.

B. If you're not ready to continue configuring user settings, you can click Skip Configuring SSO. You can return to the Onboarding Wizard at any time. However, admins will see a prompt each time they log in to Edge until configuration is complete.

Click Save & Finish. The next time users on your account attempt to sign in to Edge, they will be redirected to the portal to complete their SSO registration.

Next steps

Your employees and other users of your Storable Edge account will be prompted to create their SSO User Account at their next login. When you enable SSO, existing users will not appear in the portal until they create a SSO User Account.

If a user has not created an SSO User Account and you need to change their access to Edge, you can edit or delete the user in your software as usual. Once your users have signed up for SSO, we recommend completing a one-time audit in the SSO portal to ensure all users have the correct access.

User management in the portal: When SSO is enabled, users will be added, deleted, and given access to your software from the SSO portal. All other user permissions can be edited in Edge as usual.

Please do not add existing users directly in the Portal, as it will cause syncing errors. Instead, direct those users to log in to their software and follow the prompts.

📖 Learn more about adding and editing users in our article: SSO: User management.

Troubleshooting

📖 If you run into an issue once SSO is enabled, refer to our troubleshooting guide.