Overview of User Authentication in ScreenSteps
Controlling access to your ScreenSteps site is essential for protecting your content and ensuring only authorized users can view your materials. There are several methods available for authenticating users, each with its own advantages and considerations. Understanding these options will help you choose the best approach for your organization's needs.
Authentication Mechanism
The authentication mechanism is the method by which users prove their identity to access your ScreenSteps site and works in conjunction with your chosen identity provider. Each mechanism offers different levels of security and user experience.
The main options are:
| Available Authentication Mechanism | Identity Provider |
|---|---|
| SAML | Azure AD, Okta, Salesforce, or other 3rd-party Identity Provider |
| ScreenSteps username/password | ScreenSteps |
Authentication Methods Explained
ScreenSteps Username/Password
With this method, users have individual accounts created in ScreenSteps. They log in using the ScreenSteps login screen. This approach requires ScreenSteps to be the identity provider, and you manage user records within the platform.
SAML
SAML authentication allow ScreenSteps to connect to an external identity provider. The external system is responsible for logging in the user and confirming their identity to ScreenSteps. This requires SAML support.
Choosing the Right Authentication Method
If you have an external identity provider, SAML or remote authentication is generally the most reliable and user-friendly option. For smaller user bases, managing accounts directly in ScreenSteps may be sufficient. Login via URL is a fallback for situations where other methods are not feasible.
Key Terms
Identity Provider
An identity provider is the system that stores and manages user records for those who need access to your ScreenSteps site. The identity provider can be:
- A third-party service like Azure AD, Okta, or Salesforce
- Your own web application
- ScreenSteps itself (if you create users directly in ScreenSteps)
The identity provider determines where user information is managed.Choosing the right identity provider is foundational to your authentication strategy.