For Redirect URI, enter the Redirect URI shown in Rhino Accounts.For Sign on Method, select OpenID Connect.For the connector name, enter something like Rhinoceros or Rhino 3D.Create a new connector with the following settings:.Go to onelogin, and login to the desired domain.Make sure that ID Tokens is checked under Implicit grant and hybrid flows, and save your changes.Back in the Azure Portal, click on the Authentication blade.Back in the Azure Portal, copy the Directory (tenant) ID value shown and paste it into the Endpoint field in Rhino Accounts.Once the application is created, copy the Application (client) ID value shown and paste it into the Client/App ID field in Rhino Accounts.For Redirect URI, select Web, then enter the Redirect URI shown in Rhino Accounts.For Supported Account Types, select Accounts in this organizational directory only.For Name, enter something like Rhinoceros or Rhino 3D.Create a new application with the following settings:.Click on the Azure Active Directory blade.Go to the Azure Portal, and login to the desired directory.For the following providers, you will need to specify additional configuration settings specific to your domain: Place the specified file at the specified location in your domain’s HTTP server.and not unless your email server purposefully uses a subdomain. Similarly, removing a user from that group effectively restricts that user from using their Rhino account. For example, an administrator can create an Active Directory group that contains the only members who are allowed to login to Rhino Accounts.
IT administrators can use their own user management tools such as onelogin, Azure Active Directory, Google for Work etc… to manage team members.Users who have email addresses associated with the domain will be added to the team without the need to create an account and explicitly accept an invitation.This allows for special users that are not associated with the domain to become team members. It is still possible for team administrators to invite users manually even in a domain-linked team. New or existing accounts that have an email address associated with the domain may not add other email addresses or linked accounts, and their linked account must match the team’s login policy.If new users try to login or create an account using a different login method, they will be guided to login using the team's login method.They will also be added to the team without the need for an invite. Any new users who try to login using an email address associated with the domain will have a Rhino account transparently created for them the first time they successfully login using the team's login method.Relinquish any email addresses associated with the domain and decline joining the team.Join the team, drop any email addresses not related to the domain, and adopt the team’s login method.Any existing users who have any email address associated with the domain will be given an ultimatum the next time they login.What happens when a Rhino Accounts team is linked to a domain? Linking a Rhino Accounts team to a domain is useful in large or complex organizations. Select the appropriate role for the user.Click on the user whose role is to be modified.You will need to remove the user from your domain in order to effectively remove him or her from the team.
Warning If the team is linked to a domain and the user’s email addresses belongs to said domain, the user will be given the option to be added again the next time they login.
0 kommentar(er)
