SSO Question

[csubirats]

Hi, We are in the process of moving to SSO and my Security Team wants to know if its possible to enable SSO but use Concur 2FA??  Does this question make sense, sorry I'm not a tech person. Any feed back helps....I think we've hit a hurdle due to many personal email addresses in lieu of business emails.

[andilillemoen23 · Accepted solution]

Good Afternoon,

2FA is going to be active for all users who do not use MFA.   When you go to single sign on, you will not be using 2FA for logging in from your Intranet site.  However, if they are also going to be able to log in via their mobile phone, they would have to use 2FA.     Basically, SSO bypasses the 2FA in the site.

Regards,

Andi

SAP Consultant

[andilillemoen23 · Accepted solution]

Good Afternoon,

2FA is going to be active for all users who do not use MFA.   When you go to single sign on, you will not be using 2FA for logging in from your Intranet site.  However, if they are also going to be able to log in via their mobile phone, they would have to use 2FA.     Basically, SSO bypasses the 2FA in the site.

Regards,

Andi

SAP Consultant

[DeanR · Accepted solution]

@andilillemoen23 

SSO should work the same for the Concur website and the app.  I know that it does for our users.

@csubirats 

You can enable SSO but not make it mandatory, leaving the option for users to log in with username and password that will then force them to use the Concur 2FA process.   

[WendyatONeal]

Why then do I have the option to sign in on my mobile with SSO?