New users with Federated Authentication

You can use the sign-in URL to invite users who are already configured for a Microsoft Active Directory FS (AD FS), OpenID Connect (OIDC), or Azure AD to an organization that uses Federated Authentication. This may be a more efficient way of creating new user accounts compared to inviting users via the Users tab in the administration section. You can also invite users who are not configured for federated authentication.

You need to be in the Administration mode, accessible from your profile icon, to undertake this task.

There are two options to sign in to Diligent Data Room using federated authentication:

• The sign-in URL from the relevant configuration dialog

  For federated users with or without a Diligent Data Room account.

• The Diligent Data Room URL.

  For users with a Diligent Data Room account.

Prerequisites

Federated authentication (AD FS, OIDC, or Azure AD) has been fully configured and enabled for the organization as described in the relevant pages. For more information, go to Manage Federated Identity solutions.

Inviting users to utilize Federated Authentication

You will need to send the sign-in URL to the new or existing user so they can sign in using the relevant configuration.

1. Select the Identity tab.

2. In the Active Directory Federation Services dialog or the Open ID Connect dialog, open the Sign-in URL tab.

3. Copy the link in the Sign-in URL tab and communicate it to the relevant users.

   Users following the URL, are directed to the external identity provider for authentication. After successful authentication, users are automatically redirected to Diligent Data Room. If the authenticated user does not have a Diligent Data Room account yet, Diligent Data Room will automatically provision one. Organization administrators can see all user accounts in the Users view within the Diligent Data Room administration area.