SSO sign in misdirected

[somalwar]

Hi - I am a Rutgers user trying to sign in at concursolutions.com using my xxx@rutgers.edu email address, expecting to be directed to Rutgers SSO, but I end up at pingprod@fnal.gov login screen.  I am also affiliated with fnal which knows my rutgers email address, which is likely why this is happening.  Is there some setting to prevent this wrong SSO redirection?  Thanks

Sunil

[cjmarimo · Accepted solution]

Hello @somalwar ,

In SAP Concur (concursolutions.com), when a user enters an email address, Concur automatically attempts to identify which organization (IdP) the email belongs to and redirects the user to the corresponding SSO.
SSO routing is automatic based on the Login ID/Verified Email Addresses/SSO code. If the same email address is registered in more than one organization or is associated with two different Identity Providers, Concur selects one of them, which may not be the one you expect.

Try using your Login ID instead of the email address to sign in to Rutgers .

How do you sign in to FNAL?

Log in to the fnal profile and check the verified email you have there, to see whether it matches the email in your Rutgers profile. To verify this, if you can sign in to the desktop version, go to Settings → Other Settings → Concur Mobile App.
There you can see your company’s SSO code, Login ID, and verified email.

BR,

cj

[somalwar]

@cjmarimo Got it!       (concur login id)@(mydomain=rutgers)  is more robust than (one of my usernames)@mydomain.  Makes sense because the concur login id is unique and controllable for this purpose whereas my multipurpose institutional email ids are not unique.  This logic prompted me to try my (primary institutional netid)@mydomain, and that also worked.  So the moral of the story is to resort to the primary id at either end when in trouble.  Thanks very much!