Single Sign-On
Enable Single Sign-On (SSO) to apply your organization's authentication security policies to an individual workspace. Admins can enable SSO on a workspace-by-workspace basis.
Note
To access this page, you must have a Workspace Admin role assigned to you.
Tip
You can use any identity provider that supports the OIDC or SAML 2.0 protocols. Step-by-step guides are available for the most popular identity providers.
Use these guides to enable SSO using either the OIDC or SAML 2.0 protocols for an individual workspace:
OIDC
SAML 2.0
Configure SSO for seamless authentication
After you configure SSO for a workspace, you might still receive OTP challenges from Alteryx when registering, signing in from a new computer, or accessing the Account Admin page. To provide a seamless SSO experience and prevent these OTP challenges, configure your SSO connection.
To enable seamless registration, include your first name and last name in the SAML response from your identity provider.
If either your first name or last name is included, the registration page is prepopulated with the available information.
If both your first name and last name are included, the data-entry page, including the password prompt, is skipped.
Configure Login
Configure your SSO connection to direct you to a specific workspace after authentication. Your login URL must include the workspace identifier in the following format:
https://us1.alteryxcloud.com/ayx-one?workspaceGid=<workspace identifier>Replace
<workspace identifier>with the identifier of the workspace you want to access.
Access the Account Admin page without an OTP challenge
To access the Account Admin page through SSO without an additional OTP challenge, use the following URL format:
https://us1.alteryxcloud.com/admin-portal/<identifier>Replace
<identifier>with the appropriate identifier for the Account Admin page.
Single Sign-Out
Use Single Sign-Out to enhance security and simplify the sign-out experience. With Single Sign-Out enabled, the user's current browser and IdP session terminate when the user selects Sign Out.
Important
Not all identity providers support Upstream SAML Request Parameters. Please check your identity provider’s documentation for support before proceeding.