Updating Users with a UPN in 7.2 (when Switching to SSO Authentication)
Who is this article for?IT Personnel implementing SSO for authentication.
Access to your SSO provider settings and admin access is needed.
Important Note: These steps are valid for Ideagen Quality Management 7.2 only. If you are using Ideagen Quality Management 7.3 or higher then please visit How to Bulk Edit Users for steps on how to mass update users.
Single Sign-On (SSO) is a session and user authentication service that allows a user to log in to various systems using a single set of credentials. A User Principal Name (UPN) is used to link the accounts and must be updated before a user can log in using Single Sign-On (SSO).
This article outlines how to update the User Principal Name (UPN) and is split into the following sections:
1. Options for Updating the UPN
The workflow below outlines the process for planning to update your UPN values:
2. Update the User Principal Name (UPN) Manually
- Launch Ideagen Quality Management.
- Open the Admin module.
- Browse to Security, and then to People.
- Open the person record.
- Update the User Principal Name field.
- Click OK.
3. Bulk Update Users
Important Notes:
- These steps can only be followed if the UPN is the same email address as the Ideagen Quality Management user or is based on the format of firstname.lastname@company.com.
- This process will update ALL users to include the UPN matching the email address.
- A full backup of the Ideagen Quality Management database must be taken before performing these steps. For details on how to do this please visit How to Backup the Ideagen Quality Management Database.
- An additional review will be needed when the script has completed so that any exceptional cases can be manually updated.
There are two scripts available:
- Script 1: The UPN is set to match the same value as the primary email address for all active users.
- Script 2: The UPN will be set to the format firstname.lastname@company.com e.g. alan.blair@ideagensolutions.com).
- Script 3: The UPN will be set to the format firstinitial.lastname@company.com (e.g. a.blair@ideagensolutions.com).
To bulk update the users:
- Download the required SQL script.
- Launch Microsoft SQL Server Management Studio
- Log in as the Administrator account
- Create a backup of the Ideagen Quality Management database. Please visit How to Backup the Ideagen Quality Management Database for more details.
- Click File, and then New Query.
- Drag the script file onto the blank window and release to make the script automatically appear in the Query window
- Select the relevant database from the drop down list at the top of the screen.
- Click Execute.
To check the update has been successful:
- Launch Ideagen Quality Management.
- Open the Admin module.
- Browse to Security, and then to People.
- Notice the UPN field should be populated.
Note: Once the User Principal Name (UPN) has been set it is important to review users to confirm the changes have been successful. Users can be manually changed if needed.
Exceptional Cases: An additional review will be needed when the script has completed so that any exceptional cases can be manually updated. These kind of users could be external users, users who are not part of your Active Directory structure, or users who don't follow the standard email format. These users can be updated by performing a manual update of the user.
4. Further Reading
- Configuring Single Sign-On (SSO)
- Importing Ideagen Quality Management Users from Microsoft Excel
- Single Sign-On (SSO) Glossary of Terms