Contents of this article:
- Web Platform: Enabling SSO to Sign into IRIS Connect
- Record app: Enabling SSO to Sign into IRIS Connect
- Turning On Personal Mode with Single-Sign On (SSO)
- Signing in with SSO
- Troubleshooting SSO sign-in
- Admin Visibility
- SSO Integration
Web Platform: Enabling SSO to Sign into IRIS Connect
To enable Single Sign-On (SSO) on the Web Platform, log into your IRIS Connect account and go to your Account page. You can access this under the drop-down menu when you click your avatar on the top right corner.
Select Linked Accounts then click Link on the provider you wish to use for your single sign-on. You will be taken to the provider's website to type in your username and password for this provider.
You will then be prompted to log into your IRIS Connect account to link it with your account from the provider you selected. Enter your username and password and click Sign in.
You will then see the following success message
and under Linked Accounts, you will see it is now Linked.
Record app: Enabling SSO to Sign into IRIS Connect
You can also enable Single-Sign On within your Record app. Open the app and click Add User.
Depending on your selected Region you will have options to "sign in with" as seen below.
For this example, we are using Google to link accounts and enable SSO. After clicking the Google symbol, you'll be asked to sign into your Google account. Type your email here and click Next.
Then, type your password and click Next.
If you have not already linked your account via the web platform, you will need to log into your account using your IRIS Connect credentials so the 2 accounts are then linked.
Once you've done so, you'll be logged in and your accounts will be successfully linked.
Next time you log into the Record app, click the Google (or whichever provider you chose to link) symbol, click your email address and you'll be automatically signed in.
Note: You cannot use SSO if you are not connect to the internet. You will receive this message:
Turning On Personal Mode with Single-Sign On (SSO)
Once your account is linked you can enable Personal Mode using SSO. To do so, click the three horizontal line icon, then Personal Mode. Click On, and then Add User. Click the provider you're using for SSO, choose your information, and then Personal Mode will be turned on.
Signing in with SSO
Once your IRIS Connect account is linked to a provider (such as Google or Microsoft), you can sign in with that provider instead of your IRIS Connect username and password.
Things to know
- Use the same account you linked. Many people have more than one Google or Microsoft account, for example a personal account, a school account and an organisation account. Only the account you linked to IRIS Connect will sign you in.
- Your organisation may have turned off password sign-in. If so, you won't have an IRIS Connect password, and "Forgot password" will send you back to your SSO provider instead of resetting a password. Always use the SSO option to sign in.
- Not sure which account you linked? Email support@irisconnect.co.uk with your name and the email address you use for IRIS Connect.
On the web platform
- Go to the IRIS Connect sign-in page.
- Click the button for your SSO provider. Don't type your provider email and password into the IRIS Connect username and password boxes.
- When your provider asks you to choose an account, pick the one you linked to IRIS Connect.
- Enter that account's password if asked. You'll be taken into IRIS Connect.
On the Record app
Your device must be connected to the internet to sign in with SSO.
- Open the Record app and tap Add User.
- Under "Sign in with", tap your provider's symbol.
- Choose or enter the account you linked, and sign in with its password.
- Next time, tap your provider's symbol and select your email address to sign in automatically.
Switching to the right account
Your browser or device may sign you in automatically with a different account than the one you linked. To change it:
- On your provider's account selection screen, choose the option to use another account (for example "Use another account" for Microsoft or Google) and enter the account you linked.
- If you don't see that screen, sign out of your provider in your browser first, then try again.
- On a shared device, you can open a private or incognito browser window, which won't remember other accounts.
Troubleshooting SSO sign-in
| What you see | What it means | What to do |
|---|---|---|
| "You need to log in to link your account" | You signed in with an account that isn't linked to IRIS Connect | Sign in again with the account you linked, or link this account (see above) |
| Password reset sends you to your SSO provider | Your organisation has turned off password sign-in | Use the SSO sign-in option instead |
| You're signed in automatically with the wrong account | Your browser or device remembers another account | Choose "Use another account" or sign out of your provider first |
| SSO sign-in won't load in the Record app | The device isn't connected to the internet | Connect to Wi-Fi and try again |
If you still can't sign in, email support@irisconnect.co.uk with your name and the email address you use for IRIS Connect.
Admin Visibility
From the Admin settings, users page, admins will be able to see which users have linked accounts and which provider they've chosen to link.
SSO Integration
We can support custom SSO integrations. Please contact us to discuss your particular requirements and we will do our best to assist you. Our SSO integration uses OpenID Connect (OIDC) using OAuth 2.0 (we don't support SAML).
If you would like to proceed with discussing your SSO integration please get your technical contact to email: support@irisconnect.co.uk
Note: Organisations using SURFconext will need a eduperson_entitlement claim of urn:mace:surfnet.nl:surfconext.nl:irisconnect.com:irisconnect: