Please follow the steps below when setting up SSO for Existing Clients:  

1. Send an email to the SSO Team ([email protected], [email protected]) via the communication tab in the associated Sales Order in Netsuite. Please include the following:
   • SSO identify provider (i.e., Ping, Salesforce, Okta, or Azure)
   • Accelerate Tenant Log In Domain
   • Is the tenant on the US or EU server?
2. SSO team will create and return the tailored configuration guide to share with the customer
3. The client will complete the configuration based on the custom guide
4. The client will then send us the data points that are clearly requested within the configuration guide
5. The SSO Team will configure the SSO parameters on our end, but will keep the SSO switched “off” (this is because once SSO is “on”, that then becomes the only way for users to access Accelerate)
6. You will then notify the client that configured is complete and ask for the following
   • a list of any users that need to test the SSO (name / email addresses)
   • an agreed upon day and timeframe for them to test
7. During the agreed upon test period, the SSO team will switch SSO to “on”
   • PLEASE NOTE: During this time, existing users will not be able to access the system. Please do be sure to coordinate that with the client to determine when and how long they want to test, and allow them to alert users, if needed, that there will be system updates during the agreed upon window. This process can be completed in 1-2 hours if the client coordinates with all test users to limit the downtime. 
8. The client will test and confirm that everything is setup correctly
9. Once testing is complete, we will switch SSO to “off”
10. You will then request, from the client, a go-live day for the SSO: 
    • Ensure the client communicates to their users this go-live date, so that users know that from this specific date forward, they will only be able to access Accelerate through their SSO provider
11. SSO Team will then switch their SSO to “on”, on the agreed upon go-live date

Please note that once a client has fully completed the SSO configuration process, there is no other way for them to access the system. The user will recieve the following message if they try to go directly to the tenant URL: