Managing SSO Users

📍 To access Users, go to: More > Users

🛡️ Note: This article only covers managing SSO users who have already logged into RedFlag. To add a new user, update a user role, or delete a user, please refer to the Microsoft SSO Configuration or SAML Configuration articles.

If you have enabled Single Sign-On (SSO) using Azure OpenID Connect (OIDC) or SAML, user accounts are managed through your external authentication provider. This integration simplifies account management and enhances security by centralizing login credentials and access control.

What This Means

• Users will sign in via your connected SSO provider (Azure AD, OpenID, or SAML).
• User permissions, roles, and access are controlled by your authentication provider.
• You do not need to manually create or manage user credentials within RedFlag.

Additional Feature Access in RedFlag

After a user signs in via SSO for the first time, you will still need to assign access to certain features within RedFlag, including:

Restricted Folders

If your location uses restricted folders, click Restricted Folder to assign folder access to the user.

Group Access (Editor Role Only)

For users with the Editor role, click Groups to define which recipient groups they can message.

Chat Access

If 2-way chat is enabled and the user needs access:

• Check the box next to Chat.
• Click Inboxes to select chat inboxes.
• Selecting All grants access to current and future inboxes.
• Selecting specific inboxes limits access to only those selected.

Primary Contact

Account Admin, Super Admin, and IT Admin users can be designated as Primary Contact for one or more locations. Primary Contacts receive system-level security and account notifications.

• Account Admins — Checking Primary Contact applies to all of their associated locations automatically.
• Super Admins and IT Admins — Primary Contact can be set per location individually.

A location can have multiple Primary Contacts.

To set or update Primary Contact status:

1. Go to More > Users
2. Click the user's name to open their profile
3. Under each location listed, check or uncheck Primary Contact
4. Click Save

Primary Contact Notifications

Primary Contacts receive automated email notifications for the following account activity:

• A new user is added to the account
• A user registers a mobile number for multi-factor authentication (MFA)
• A user updates their mobile number for MFA
• A user updates their password
• A broadcast is confirmed as spam, resulting in account suspension
• The opt-out threshold is met and account suspension is triggered

To assign any of the above features:

1. Go to the Users page.
2. Click on the user's row to open their profile.
3. Edit their permissions as needed.
4. Click Save.

🛡️ Note: These permissions are managed within RedFlag and are not pulled from your external SSO system. For detailed steps, see Add User.