Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Authentication Methods Overview

Paragon Automation can authenticate users by using different authentication methods.

You can use one of the following authentication methods to log in to the Paragon Automation Web GUI.

Username and Password Authentication

Users can create a Paragon Automation account to access the Paragon Automation Web GUI. Paragon Automation authenticates the identity of users by verifying the login credentials (username and password) entered by the users. This ensures that only users with valid credentials access Paragon Automation. For more information, see User Activation and Login.

Single Sign-On (SSO)

Paragon Automation can authenticate users by using single sign-on (SSO). SSO simplifies password management for users and administrators through centralized authentication by an identity provider (IdP).

A superuser can configure IdP in the Organization Settings page and map default roles in Paragon Automation to the IdP user groups. Paragon Automation supports Secure Assertion Markup Language (SAML 2.0) for SSO authentication using IdPs. The IdP asserts a user's identity and allows the user to access the Web GUI based on the user's role.

To configure SSO in Paragon Automation:

  1. Add the IdP to Paragon Automation; see Manage Identity Providers.

  2. Map users logging in by using the IdP account credentials to the predefined roles in Paragon Automation; see Manage Roles.

After IdP is configured, superuser shares the SSO URL with the users.

To sign in using SSO for the first time:

  1. User must enter the SSO URL in a Web browser.

    The login screen of the IdP appears.

    IdP server authenticates the user based on the sign in method configured. For example, an approval notification is sent to the user's registered device.

  2. After the IdP server successfully authenticates the user, the user is logged in to the Paragon Automation Web GUI. Paragon Automation enforces access control on the user based on the role that the Paragon Automation superuser previously assigned for the IdP user group to which the user belongs.

Once a user is successfully authenticated, the user can avoid the process of repeated logins to access the Paragon Automation Web GUI. The user remains signed in until the authentication session expires.

Related Documentation