Single Sign-On

Single Sign-On (SSO) allows users to log in to IMMS using their existing user account. One click on the IMMS login page initiates the SSO login process.

The email address from the digital identity is used to match the user with an IMMS user. If no matching user exists, a new IMMS user is created. If multiple IMMS users have the same email address, the SSO login fails. The roles assigned to the IMMS user are determined by the security groups received during authentication and the corresponding Single Sign-On Groups configured in IMMS.

Setting up Single Sign-On

Before SSO can be used, the SAML integration between IMMS and the identity provider must be set up. The library must decide which security groups will be used for IMMS access. This normally requires coordination between the library staff responsible for IMMS and the library's IT department. The required security groups are created and maintained in the identity provider.

Each security group used for IMMS must be mapped to the appropriate IMMS roles using Single Sign-On Groups in IMMS Master Data. These mappings determine the roles assigned to users when they log in using SSO. Only security groups intended for use with IMMS need to be mapped.

When the SAML integration and role mappings have been configured, users can log in using the SSO button on the IMMS login page.