Hi, is there a way to disable the use of /suite/?signin=native? We are currently using OpenID as our authentication method(we need to include every new user on the AzureAD Group), but if an Admin user creates one and don't include it on the group, the user could access to Appian using the native version. For security reasons I don't want this to happen. What can we do to disable this option?
Discussion posts and replies are publicly visible
I am not sure whether that login can be disabled. And that could also become an issue in case the SSO fails, because then, not even a admin would be able to log in.
Did you consider to create a process to create new accounts? This would allow you to make sure nobody can "forget" an important step in the procedure.
Another option is, to work with group membership rules to add ALL users to the SSO group, except admins.
Hi Stefan,
Yes, I do have a process for creating new users, but my fear is that there are a few admins that could decide to not use that process and go directly to admin console to create new users.I like that idea, to work with group membership rules to add ALL users to the SSO group but how should I exclude admins? I losted on that part. Thank you!