How to enable Single Sign On for your Outcomes Star Online account #
1 What is Single Sign On? #
Single Sign On (SSO) can be enabled in your Outcomes Star Online account to allow users to sign into the Star Online with an existing email and password, without the need for a separate Star Online password.
This can make accessing the Outcomes Star Online easier and quicker for practitioners, making them more likely to use the application and record Outcomes Star data.
This feature is available free of charge to existing Outcomes Star Online accounts.
2 Technical specification #
We currently support this feature for Microsoft and Google user accounts/email addresses/identities only.
Our SSO is provided via OAuth 2.0. SAML or other SSO solutions are not currently available.
Our Microsoft implementation follows guidance found here: https://learn.microsoft.com/en-us/aspnet/core/security/authentication/social/microsoft-logins?view=aspnetcore-8.0
Triangle and the Star Online cannot access a user’s Microsoft or Google login or emails. Their Microsoft/Google login will only be used for signing into the Star Online.
3 Information governance considerations #
SSO may be preferred by your organisation as it will mean the security settings in use for your Microsoft or Google email addresses apply to your use of the Outcomes Star Online.
It is your responsibility to ensure that utilising SSO complies with Information Governance and cyber security policies in your organisation.
Multi Factor Authentication
Two Factor Authentication is enabled as standard in the Star Online. In addition to the username and password, users are sent a one-time access code by email when they login every 24 hours and per unique IP address. This must also be entered before a user is authenticated with the system.
If SSO is enabled, our standard 2FA will be disabled. By confirming that you want to enable SSO, you are confirming that you have responsibility for maintaining your own authentication protocols that are in line with your own Information Governance and acceptable use polices.
Strong Passwords
Star Online standard log in requires a strong password – minimum 10 characters, including upper case, numerical and special character. We also expect a new password every 3 months.
By confirming that you want to enable SSO, you are confirming that you have responsibility for your own password management and related policies.
4 SSO configuration options #
- Enabling SSO for all users linked to the account – suitable if:
a. all users should use SSO (and none should use ‘Standard’ Star Online login) and
b. all users have an authorised Microsoft or Google email address - Enabling SSO and ‘Standard’ login for all users linked to the account – suitable if:
a. Users should be given the choice of using SSO with Microsoft or Google, or setting up a separate password to log into the Star Online
b. For example, if you don’t know if all users have authorised Microsoft or Google accounts - Enabling SSO for the majority of users linked to the account but disabling it for a few specified users who are required to set up – suitable if:
a. the majority of users have a Microsoft or Google email and should use SSO
b. specific users should not be allowed to use SSO and must set up a ‘Standard’ login
c. for example, if you know which users do not have authorised Microsoft or Google accounts
5 Process to enable SSO on your account #
You cannot enable SSO yourself – you will need to email the Helpdesk on [email protected] to request it is enabled for your organisation.
When requesting SSO to be enabled, please specify:
- If your organisation uses Microsoft or Google identities
- Which of the 3 configuration options are right for your organisation
- That you have read this information and understood your responsibilities around information governance and the disabling of our standard identity security settings.
The Helpdesk will arrange a date and time for SSO to be enabled in your account and will send a ‘How to use SSO’ PDF which can be distributed to all users linked to the account in advance. This PDF explains what each user will need to do when SSO is enabled.
When the process to enable SSO has been completed the Helpdesk will send an email notifying you to check that everything in your account looks as you would expect it to and that your users are able to log in.
The Star Online Helpdesk will provide ongoing support to help users with the transition to SSO.