#SSO via SAML. #Account Expiration. We are on cloud instance of Appian V7.10. We

sathishkumars over 9 years ago

#SSO via SAML. #Account Expiration. We are on cloud instance of Appian V7.10. We have enabled SSO (via SAML) for a set of users. Therefore the account expiration rules for these users has to be controlled by the Identity Provider (IdP). Will the Appian account expiration rules be applicable to these users as well ? If so, which set of rules (IdP or Appian) will take precedence ? For example, as per IdP's rule, a user account will be de-activated if not logged in for 1 year but as per Appian, the user account will be de-activated if not logged in for 30days !

Discussion posts and replies are publicly visible

0 Tom Ryan
Appian Employee
over 9 years ago

You should be able to configure this through the Admin Console:

forum.appian.com/.../Appian_Administration_Console.html
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 sathishkumars over 9 years ago

Thank you Tom...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 sueb over 9 years ago

Hi sathishkumars - I'm hoping you can help me. We are a brand new Appian customer and have an agressive implementation schedule. We are weighing the effort to build SSO (via SAML) on v7.10 versus the effort to upgrade to 7.11 (released yesterday) to take advantage of the built in SSO functionality. Appian is recommending moving to 7.11, but I'm very adverse to being an early adopter of any product release. Can you tell me the effort that your team went through to configure SSO on 7.10? I would very much appreciate it. Thanks! Sue
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 sathishkumars over 9 years ago

Hi Sue, with 7.10, it was Appian Product Team who took care of applying the metadata and SAML configs etc for enabling SSO, because we are on cloud. The effort we spent was liaising with the IdP team to get a successful SAML Token handshake. I would also suggest 7.11 due to its in-built SSO (forum.appian.com/.../Appian_Administration_Console.html but would recommend to discuss with your Appian consultant.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 sueb over 9 years ago

Hi sathishkumars - Thanks so much. Was it a difficult process? We already have WAY too much to do before our 11/20 production deployment and migrating to a new version make me very concerned that we will jeopardize that date. We def will go to 7.11 - I'm just trying to decide if we should risk our date or wait until after when we'll have more time. Again - thanks for your response!!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel