Summary

This article shows admins how to require employees to log in with single sign-on (SSO) instead of an email and password. Employees then log in with Google SSO, Microsoft SSO, or a YubiKey. This adds a layer of security and makes accounts easier to manage and protect.

Before You Begin

You'll need:

• For Google SSO: The permission Can Login With Google turned on for each user group. Go to Left-hand Navigation: Reports & More » Groups » Employee and Schedule Management to turn it on.

• For Microsoft SSO: The permission Can Login With Microsoft turned on for each user group. Go to Left-hand Navigation: Reports & More » Groups » Employee and Schedule Management to turn it on.

• For YubiKey SSO: YubiKeys bought and assigned to each user in your app. See Assign Yubikeys to Users (How-To).

Caution: Turn on the group permission Can Login with Google and/or Can Login with Microsoft before you turn on this requirement. If users do not have permission to log in with Google, Microsoft, or YubiKey, they are locked out of the app. An admin user must then contact Gingr Support at support@gingrapp.com.

Steps

Important: Email-based logins must meet Gingr's strict password rules. These include complexity rules and a password reset every 90 days or less. When SSO is on, Gingr skips these rules. The SSO provider (Google, Microsoft, or the YubiKey administrator) controls password management.

Notice: When you turn this on, users must log in with SSO. They cannot access Gingr with an email and password. They are also exempt from the Strict Password and Password Reset requirements.

1. Go to Left-hand Navigation: Admin » Employees » User Account Settings.
2. Turn on the toggle "Require Alternate Authentication Login Method."
   
   

With SSO Required

If a user tries to log in with an email address and password, they see this error message: "Alternate login method required. Please login another way."

If a user tries the quick log-in feature, Gingr sends them to the log-in page. They must log in with the required method to continue.

Related Articles

• Microsoft Single Sign-On Topic Outline
• Log In with Google How-To
• Log In with Yubikey How-To