Admin Single Sign-On
  • 1 Minute to read
  • PDF

Admin Single Sign-On

  • PDF

Article Summary

Single Sign-On (SSO) is an authentication process that allows users to access multiple applications or services with a single set of login credentials (such as username and password). Narmi offers SSO for the Admin Platform, so your staff users can log in to the Admin Platform via the same SSO provider you use for other applications at your institution. SSO enhances platform security, simplifies administration, and improves the user experience by making it easier to sign in, remember passwords, and trigger password resets.

We offer Admin SSO to institutions at no additional cost. Please contact your Narmi Relationship Manager to set this up. 

Staff users must have an account on the Admin Platform and a two-factor authentication device added in order to sign in via SSO. If a user attempts to log in without an Admin Platform account, an error message appears. For instructions on adding a new staff user, go to User List - Add a New User.  For non-admins, you'll also select a Role. For more information on roles, go to Manage Roles.

Several companies provide SSO solutions, each offering its own set of features, integrations, and pricing options. Some of the most common SSO providers include: Okta, Microsoft Azure Active Directory, Google Workspace, and Auth0. Staff user info is updated automatically from the SSO provider. For instance, when a user's last name is changed in the SSO provider's directory, that updated name is reflected in the Narmi platform. Please note, user information in the Narmi platform does not get saved to the provider's directory, so the SSO directory is the source of truth for user information.

Adding SSO to an existing user does not take away their current username and password. Those credentials will remain valid if the staff user chooses to log in with them.

Log In with SSO

If your institution has enabled SSO, staff users with an account on the Admin Platform can sign in via SSO. To log in, staff users select the link to log in with [provider name], for example, Log in with Okta.

On the dialog that appears, which varies depending on the SSO provider, users enter their credentials and follow the onscreen instructions to continue. Once authenticated, the Admin Platform opens to the dashboard. The time between session reauthentication varies by SSO provider.


Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.