ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.
Support / SUP-74

Parcelwise: single sign-on with Entra ID for the first four hubs

Project
Support
Type
Support request
Status
Done Done
Priority
Medium
Organization
Parcelwise
Reporter
Femke de Boer <femke.deboer@parcelwise.example>
Assignee
Ines Costa <ines.costa@acme-hq.example>
Labels
parcelwisesingle-sign-ononboarding
Components
identity-service
Created
26 Jun 2024, 08:05 UTC
Updated
15 Jul 2024, 09:30 UTC
Resolved
15 Jul 2024, 09:30 UTC

Description

We want to start single sign-on with Entra ID at Nieuwegein, Zwolle, Almere-Poort and Tilburg. The other 28 hubs later this year. What do you need from us?

Comments (4)

Ines Costa · 26 Jun 2024, 12:20 UTC

Hi Femke,

Each hub is set up on its own: one enterprise application in Entra ID per hub, with its own certificate and sign-in address. For each of the four hubs we'll send you our SAML details; you create the app and send us its federation metadata.

Then, per hub:

  1. One test account signs in from the hub's app before the switch.
  2. We switch the hub on a Saturday morning, when few people sign in and your IT team is around if something needs fixing. Anyone signed in stays signed in.
  3. People keep their passwords until their hub is switched.

Roles come from Entra ID groups, sent with every sign-in. Please tell us which groups mean administrator, depot manager and staff.

Femke de Boer · 2 Jul 2024, 07:12 UTC

Metadata for the four apps attached. Groups are per hub: PW-Nieuwegein-Staff, PW-Nieuwegein-Managers and so on; administrators are in PW-ACME-Admins.

Ines Costa · 9 Jul 2024, 14:45 UTC

All four test accounts signed in fine. We'll switch the four hubs on Saturday 13 July at 07:00.

Ines Costa · 15 Jul 2024, 09:30 UTC

Monday check: 1,184 sign-ins through Entra ID at the four hubs since Saturday, no failures we can see. Closing; open a new ticket when you're ready for the next hubs.