This section will walk you through how to require users to utilize single sign-on to log in and access the Gingr app. When enabled, user accounts with the associated permissions will be required to login with a secure method (Google SSO, Microsoft SSO, or YubiKey). This feature adds an extra layer of security and allows for stronger authentication measures, improved user management, and provides a more streamlined way to monitor and protect accounts.

Notice:  When enabled, users will be required to utilize SSO Log-In and will not be able to access Gingr with an email and password. Users will also be exempt from the Strict Password and Password Reset requirements.

Caution:  The group permission Can Login with Google AND/OR Can Login with Microsoft must be enabled prior to activating this login requirement. If users do not have permission to login with Google, Microsoft, or Yubikey and this SSO Log-in Requirement is enabled, users will be locked out of the app. An admin user will need to contact Gingr Support at support@gingrapp.com.

Before You Begin

• To utilize Google SSO for specific user groups, navigate to Left-hand Navigation: Reports & More » Groups » Employee and Schedule Management and enable Permission: Can Login With Google.
  

• To utilize Microsoft SSO for specific user groups, navigate to Left-hand Navigation: Reports & More » Groups » Employee and Schedule Management and enable Permission: Can Login With Microsoft.
  

• To utilize Yubikey SSO for specific user groups, ensure Yubikeys are purchased and assigned to each user in your app. For more information, check out Assign Yubikeys to Users (How-To).

Require Users to Utilize SSO Login

1. Navigate to Left-hand Navigation: Admin » Employees » User Account Settings.
   
   
2. Enable the toggle "Require Alternate Authentication Login Method."
   
   
   

With SSO Required

If a user attempts to login using an email address and password instead of SSO, they will receive the following error message: "Alternate login method required. Please login another way."

If a user attempts to use the quick log-in feature to log in, the user will be redirected to the log-in page and will be prompted to log in with the required log-in method to continue.

Related Resources

• Microsoft Single Sign-On Topic Outline
• Log In with Google How-To
• Log In with Yubikey How-To
• Employee Login Topic Outline
• Log In To Gingr How-To