Authentication

Agent authentication & Enduser authentication

*The setup required outside of Pureservice for SSO is recommended to be done by someone with relevant knowledge to avoid misconfiguration. Pureservice Support may be able to assist, but this part of the setup is your own responsibility.

• You can choose to enable other forms of authentication for your agents (Agent console) and endusers (Selfservice) than the ordinary username & password here.
• The protocols supported are Windows Authentication (OnPrem only), WS Federation, SAML-P and Oauth 2. See the relevant sub-sites for detailed setup information.
• All types of setup includes an option for “Bypass SSO”. This allows users to choose between logging in with their Pureservice login details or the SSO function. If this is not enabled, users will simply be sent to the SSO login immediately.
• While all protocols are currently supported by Pureservice we strongly recommend using Oauth 2 because it is newer, more secure and easier to set up and maintain.

Before configuring the chosen authentication protocol in Pureservice, make sure your infrastructure (Azure or ADFS) is ready first.

*If you currently use Windows Authentication for Enduser authentication and want to switch authentication method, then Pureservice Support needs to disable this first.

It is important to Bypass SSO under API authentication and allow API authentication using username and password when using SSO together with the Puremobile app.