GRANTING SSO ACCESS: AN EXAMPLE

Situation: Amy, an ABC Distribution employee, needs access to manage ABC Distribution's SSO, as well as, access to all Storerooms, so she can load configuration data to each storeroom.

Addressing the Situation...

First, create a new SSO User account for Amy.

Use Amy's email address, amy@abc.com, as the Username.

The amy@abc.com user setup should also specify "ABC Distributor" as the Parent Organization.

The amy@abc.com SSO User should be given SSO Authority Level of "Full Control", which enables the ac- count to create and update SSO Users, manage organizations and locations, and manage Storeroom Permissions.

After the amy@abc.com account is created, Amy logs in, but she doesn't see any storerooms on her dash- board! Why is this?

Amy cannot see any storerooms because, although she has an SSO User account, she doesn't have any Store- room Permissions!

Second, create a Storeroom Permission record for amy@abc.com to give Amy access to all ABC storerooms.

Add a Storeroom Permission record and choose User amy@abc.com

Select the Organization "ABC Distributor". Choose "ADMIN" for Role for the Organization.

Now, when she logs in to SSO, Amy will see all the "ABC Distributor" storerooms listed under her Dash- board menu hierarchy.

When she clicks on a Dashboard storeroom name link, she will be logged in to the CUI for that storeroom with

ADMIN privileges.

If User account Amy is not yet set up on the target CUI, account Amy will be added to the CUI using the setup information from the SSO.