Introduction
Single Sign-On (SSO) enables organizations to manage user access to the HP WXP Collaboration application through a centralized identity provider. This approach improves security, simplifies user management, and ensures consistent control of access permissions across the organization.
This article provides guidance for creating Single Sign-On (SSO) user accounts in WXP Collaboration. It also describes common conditions that can prevent account creation and resolution for those conditions.
Account Creation Process
SSO user account creation depends on the configured Identity Provider (IdP) sending a valid SAML response to WXP Collaboration.
For detailed SAML requirements, refer to the document titled SSO Integration.
When WXP Collaboration receives a valid SAML message that includes the required group information, the following behavior occurs:
If a WXP Collaboration account already exists with the specified username, the user is logged in with permissions based on the group information provided in the SAML message.
If the account does not exist, WXP Collaboration creates a new user account and assigns permissions based on the group information.
Common Issues
The following scenarios can cause issues with SSO user creation or login:
The group information sent in the SAML message is incorrect or incomplete.
This scenario needs to be addressed so that the SAML message is acceptable to WXP Collaboration.
The user account previously existed but was deleted.
Restore a Deleted User Account
If a user account was previously deleted, it must be manually restored. WXP Collaboration does not automatically restore deleted accounts for security reasons.
Log in to the Admin Portal of WXP Collaboration
From the left menu, click Users.
On the Users page, open the Recycle Bin.
Enter the username in the search field and run the search.
Select the checkbox next to the user.
Click Restore Selected.
After the user is restored, login is allowed if the SAML message meets the requirements of WXP Collaboration.
Note: If a user account was previously deleted, you must complete the steps above to restore the user. The account was actively deleted, and for security reasons, WXP Collaboration cannot automatically restore deleted accounts.
Contact Us
For any assistance, create a support case or email support@wxp.hp.com.