Configure Genesys Cloud to authenticate with SSO only

Prerequisites
  • At least one third-party SSO provider configured in your org. To learn how to configure SSO providers, see About single sign-on (SSO).

Administrators can optionally disable Genesys Cloud login and only allow their users to log in by SSO. Some organizations prefer their users to authenticate using a single sign-on (SSO) identity provider instead of Genesys Cloud login credentials. Genesys Cloud administrators can define multiple SSO providers, from an expanding number of third parties.

When Genesys Cloud login is disabled

  • All Password Requirements options are disabled, since Genesys Cloud authentication is not being used. Existing password settings are preserved, in case Genesys Cloud authentication is activated again.

  • Administrators cannot delete all of the SSO providers under Interactions > Single Sign-on while Disable Genesys Cloud Login is ON.

  • Genesys Cloud users must log in to Genesys Cloud using single sign-on (SSO). Each user is prompted to choose which SSO provider to use when logging in.

Note: Do not enable SSO-only authentication if you use webhooks for chat notification integrations. This feature requires password-based authentication to Genesys Cloud and fails with errors when SSO-only is enabled.

Enable SSO only authentication

  1. Click Admin.
  2. Under Account Settings, click Organization Settings.
  3. Click Menu > Account > Organization Settings.
  4. Select the Authentication tab.
  5. Below Genesys Cloud login, set Disable Genesys Cloud Login to ON.
    Note: When this switch is set to OFF, Genesys Cloud authentication is used. Setting it to ON  configures your org to use a specific SSO provider. The default state if this switch is OFF.
  6. Click Save. The system prompts you to accept or decline an acknowledgment message. 
  7. Click Accept. If you decline, the operation is canceled and the switch is restored to its original state.

Disable SSO only authentication

If at a later time you decide to disable SSO only authentication and reenable Genesys Cloud authentication, you can do so.

  1. Click Admin.
  2. Under Account Settings, click Organization Settings.
  3. Click Menu > Account > Organization Settings.
  4. Select the Authentication tab.
  5. Below Genesys Cloud login, set the Disable Genesys Cloud Login switch OFF.
  6. Click Save.

You’ll then need to reconfigure Genesys Cloud password requirements.  For more information, see Set Genesys Cloud password requirements.