Benefits
Single sign-on (SSO) provides access to multiple applications with one set of login credentials. ZenGRC for easy user management directly from your organization's SSO Identity Provider (IdP).
Overview
The ZenGRC SAML Settings provides an area where groups based on ZenGRC permissions levels can be maintained. By creating groups with the same names in your organization's SSO IdP, users only need to be added at the SSO IdP level, which replicates to ZenGRC and allows users to log in at the appropriate permission level.
Setting the Connection
Creating a SAML SSO connection between ZenGRC and your IdP can only be done by an administrator with access to both.
IMPORTANT
To set up SAML SSO on your ZenGRC instance, please see Configuring SAML SSO in Your IdP.
Enabling Group-based Roles
To allow for groups in your IdP and ZenGRC instance to share information, complete the following steps:
- Select Enable group based role handling in ZenGRC.
Update group names so they are identical in the IdP and ZenGRC.
TIP
ZenGRC provides names for you to user; however, they can be changed if needed.
Renaming SAML SSO Groups
Group names can be updated or changed if needed; however, if the corresponding group name is not