Help Center

Protecting workspaces with separate SSO configurations

Lewis Smith-Tong

With workspaces, it’s possible to either protect the entire organization (i.e. all workspaces and styleguides) with the same SSO configuration (or provider) or to protect each workspace with separate SSO.

This article goes into the details of having separate SSO configurations for each workspace. You can learn more about the basics of SSO here.

Why use separate SSO

Different divisions use different SSO

You need to setup an SSO integration if you require :

• editors and reviewers to login to zeroheight via SSO, or
• viewers to login via SSO to access styleguides

If your organization has divisions that use different SSO providers (or separate instances of the same provider), you’ll be able to setup a separate SSO integration with each workspace so that:

• Editors and reviewers login to their workspace in zeroheight via their division’s SSO
• Editors protect styleguides in their workspace with the SSO used by the viewers of those styleguides

Different styleguides have different audiences

If you would like one styleguide in your zeroheight organization to be accessible to one group of viewers and another styleguide to be accessible to a different group, you’ll be able to setup a separate SSO integration with different workspaces to deliver this outcome.

Set up SSO per workspace

1. Send the following information to support@zeroheight.com:
   • the link to your organization (i.e. [organization name].zeroheight.com)
   • a name for each SSO group for each workspace
2. Follow the setup instructions for your SSO provider in our guides below using the provided SSO ID URLs and SSO IDs for each workspace
   • Okta
   • ADFS
   • Azure
   • G Suite
   • OneLogin
   • Other providers
3. Send the Identity Provider Single Sign-On URLs and X.509 Certificates for each workspace back to zeroheight support to complete the setup

Login as an editor or reviewer

Once setup is complete, editors or reviewers will see the option to Sign in with SSO

They will need to select an SSO group:

After selecting a group they’ll be re-directed to sign in via SSO and then logged into their zeroheight organization.

Protect a styleguide with SSO

Once setup is complete, editors will see the option to protect styleguides with SSO within Styleguide settings. When this option is selected the styleguide will only be accessible to viewers according to the SSO configuration for the styleguide’s workspace.