Depending on the configuration, several connection possibilities are offered to users.
SSO connection
The SSO connection (single sign-on, or unique authentication in French) allows a user to access several applications or services with a single authentication. In other words, the user needs to connect only to the network of his organization to access 365talents, without having to authenticate again.
Depending on the 365talent needs can manage one or more SSOs. This also means that the management of authentication is fully managed by the SSO, and that 365talents never knows the passwords of users.
Single SSO
When he is already connected to the network of his organization, the user has no action to do: he will be automatically connected to the platform when he tries to access it. If IP filtering is activated and is trying to access the platform outside the network provided by its organization, an error message is displayed, the application is not accessible.
Multiple SSO
When he tries to access the network of his organization from the network and the latter provides several SSOs, the user is invited to select the one who concerns him.
By selecting the SSO that concerns him, the user is authenticated on the platform..png)
If it tries to access the platform for a network of its organization on which it is not authenticated, an error message is displayed, the application is not accessible.
Password connection
Optionally it is possible to offer users password authentication, especially for users who do not have access to the organization's secure networks.
When activated, password connection is offered to all users of the platform, whether or not they can connect via SSO. The two methods can be offered simultaneously, the automatic connection by SSO can no longer be offered and users are faced with a login sight.
.png)
In the case of password authentication, he asked the user when he first connects to enter the email address of his account and define a password. This password is chosen by the user and known to him alone.
Password safety constraints (length, complexity, lifespan) can be defined via configuration.
The password can be modified by the user: in case of forgetting from the authentication page (by clicking on "Password forgetting") or for any other reason from the "parameter" page of his account..png)
In all cases an email is sent to the user and a new password creation procedure allows him to renew it.
Multi-Factor authentication
he MFA (for Multi-Factor Authentication, or Multi-Factory Authentication in French) is an authentication method which strengthens security by asking a user to provide at least two separate evidence (factors) to check his identity when he connects to 365talents per password. This service is optional and defined via configuration.
Once the option is activated, it is requested during the first user connection via password to define a trusted device. A scannable QR code or a code to enter via an authentication application (Authenticator, Authy, Duo, etc.) allows you to define and save this trusted device.
The user will then be asked to connect to connect to a double authentication code generated by this trusted device.
The user can manage and create up to three MFA configuration from the "Settings" screen of his profile.
.png)
Also in the event of a need for any administrator user with access rights to the employee benchmark may delete MFA configurations from a given user, and thus allow him to reconfigure his account.
.png)
