HighQ and SSO

27289

Not sure if this is possible but curious as to current capabilities..

I understand that HighQ can accept identity providers 'upstream', in that placing an IDP 'before' HighQ will allow authentication into HighQ ("You've logged into Okta, so you can now access HighQ").  Is there any capabilities that will allow HighQ to act as an IDP?   ("You've logged in to HighQ so you can now access site x") ? 

i.e. we want to be able to validate a user login request at HighQ and pass that SAML response downstream instead of it stopping at HighQ so we can authenticate other systems..

I know this wasn't possible last year as it looked like there was no way to pass that response downstream, but wondering if things have changed now that TR are at the helm?

Thanks

Parents
  • Following up on a part of this: "I understand that HighQ can accept identity providers 'upstream', in that placing an IDP 'before' HighQ will allow authentication into HighQ". Does that capability expand to external users? Could an external user login to Okta, for ex, and from there access our Collaborate instance?

    and how would that work if we employee Collaborate's true 2FA and also require a periodic password reset?

Reply
  • Following up on a part of this: "I understand that HighQ can accept identity providers 'upstream', in that placing an IDP 'before' HighQ will allow authentication into HighQ". Does that capability expand to external users? Could an external user login to Okta, for ex, and from there access our Collaborate instance?

    and how would that work if we employee Collaborate's true 2FA and also require a periodic password reset?

Children
No Data