Configure PureCloud to authenticate with SSO only

  • At least one third-party SSO provider configured in your org. To learn how to configure SSO providers, see About single sign-on (SSO).

Administrators can optionally disable PureCloud login and only allow their users to log in by SSO. Some organizations prefer their users to authenticate using a single sign-on (SSO) identity provider instead of PureCloud login credentials. PureCloud administrators may define multiple SSO providers, from an expanding number of third parties.

Note: Do not enable SSO-only authentication if you use bridge connectors or webhooks for chat notification integrations. These features require password-based authentication to PureCloud and fail with errors when SSO-only is enabled.

Use SSO authentication in your org instead of PureCloud login credentials

  1. Click Admin.
  2. Under Account Settings, click Organization Settings.
  3. Select the Authentication tab.
  4. Below PureCloud login, locate the switch labeled Disable PureCloud Login. When this switch is disabled, PureCloud authentication is used. Enabling it configures your org to use a specific SSO provider. The default state if this switch is OFF.

  5. Click the switch. Its indicator changes from OFF (indicating use of PureCloud sign-on) to ON (indicating that SSO authentication is preferred.)

    When Disable PureCloud Login is ON:

    • All Password Requirements options are disabled, since PureCloud authentication is not being used. Existing password settings are preserved, in case PureCloud authentication is activated again.

    • Administrators cannot delete all of the SSO providers under Interactions > Single Sign-on while Disable PureCloud Login is ON.

    • PureCloud users must log in to PureCloud using single sign-on (SSO). Each user is prompted to choose which SSO provider to use when logging in.

  6. The system prompts you to accept or decline an acknowledgment message:

    You acknowledge that this setting restricts access to your PureCloud account to only those users who log in by your SSO Identity Provider. You acknowledge responsibility to maintain your SSO certificate and configuration. Should you SSO settings change or expire, you acknowledge that your organization users will not be able to access the PureCloud application until settings are corrected. Genesys PureCloud, Inc. will not be liable nor responsible for any interruption of access to PureCloud services.

    Click Accept. If you decline, the operation is canceled and the switch is restored to its original state.

  7. Select the provider to use for SSO authentication. You must select a provider, even if only one provider is defined for your org.
  8. Click Save.

To switch from SSO to PureCloud authentication

  1. Click Admin.
  2. Under Account Settings, click Organization Settings.
  3. Select the Authentication tab.
  4. Below PureCloud login, set the Disable PureCloud Login switch OFF.
  5. Click Save. See Set PureCloud password requirements for related settings.