Orbit offers Single Sign-On (SSO) capabilities for operator users, enhancing security and streamlining access management. This feature allows organisations to integrate their existing identity providers with Orbit, providing a seamless authentication experience for their users.
When a user logs in via SSO for the first time, Orbit automatically creates a user account based on the information provided by your identity provider. This ensures a smooth onboarding process for new users.
Your identity provider may also manage people who should not work in Orbit MissionControl, such as partners or other companies of your group. In that case, Orbit can admit only users whose identity provider sends a given attribute value, for example only users marked as internal staff. If the attribute holds several values, one allowed value is enough.
A user who is not permitted sees this message on the login page, and no account is created for them:
Your account doesn't have access to Mission. Please contact your administrator.
The restriction is checked when a user signs in for the first time. Once an account exists, a later change of the attribute in your identity provider does not remove it. To take access away from such a user, deactivate them in Orbit MissionControl.
For assistance with SSO configuration or to enable this feature for your organisation, please contact Orbit support. Our team will guide you through the setup process and ensure a smooth integration with your existing identity management system.
Any identity provider that supports SAML 2.0, for example Microsoft Entra ID or PingOne.
What happens if a user without the required attribute value signs in?
The login page shows that their account doesn't have access, and no account is created in Orbit. Once the attribute value is set in your identity provider, the user can sign in again.
Does changing a user's attribute in my identity provider remove their access?
No. The restriction is checked on the first sign-in only. To remove an existing user's access, deactivate the user in Orbit MissionControl.
