Applies to: Okta

Summary

This article provides instructions for managing users in Okta when Okta Integration is configured as Auth (SSO) Only.

IMPORTANT: This process requires coordination between the Cloud Portal 
Administrator and the Okta IT Administrator.

Creating a New SSO Account (Cloud Portal Admin)

To create a new SSO account: 

1. Log in to Cloud Portal. 
    
2. Navigate to the Users page and click Add user.
   
   
    
3. In the Option section, select SSO account.
   
   
    
4. Confirm the New account tab is selected and enter the First name / Last name / Email address, then Select role.
   
   
    

5. Click OK. The account is initially pending. 

   IMPORTANT: The user must be assigned to the Hanwha Vision Cloud app in Okta to log 
   in successfully.
   
   You cannot add a user as a new account if the email address meets any of 
   the following conditions: 
   The email already exists in your current organization.
   The email is already registered as an SSO account in your organization or any 
   other organization.

Converting an Existing Account (Cloud Portal Admin)

To convert an existing account: 

1. Log in to Cloud Portal. 
    
2. Navigate to the Users page and click Add user.
   
   
    
3. In the Option section, select SSO account.
    
4. Click the Existing account tab.
   
   
    
5. Click the User list drop-down, and select the account(s) to convert. 
   
   
    
6. Review the policy and click OK. 
   
   The following notifications appear at the bottom of the screen: 
   
   Converting multiple accounts simultaneously may take some time. Please stay on the page until the process is finalized. 
   
   Bulk Handling: If you have more than 50 accounts to migrate, please process them in separate batches of 50 or fewer to ensure system stability. 
   
   The conversion is only complete when the following notification appears at the top right of the screen: Account conversion completed successfully. 

IMPORTANT: Existing accounts will be deleted, but the user role will stay the 
same. The new SSO account will be in a pending state. Users must be assigned 
to the Okta app to log in.

Even after creating or converting an account in Cloud Portal, the user 
must be assigned to the Hanwha Vision Cloud app within your corporate Okta 
dashboard to log in.

NOTE: A converted SSO account remains in a Pending state until the user 
successfully completes their first login via the Okta authentication path.

Adding a User to the Okta App (Okta IT Admin)

To add a user to the Okta app:

1. Log in to Okta and go to the Admin page.
    
2. In the navigate bar on the left, click Admin Console > Applications > Applications.
   
   
    
3. Click Hanwha Vision Cloud.
   
   
    
4. Click the Assignments tab > Assign > Assign to People.
   
   
    
5. Click Assign to add the user to the app.
   
   
    
6. Verify the user attributes (Username, Given Name, Family Name) and click Save and Go Back.
   
   
   
   

Removing a User from the Cloud (Cloud Portal Admin)

To manually remove a user from the Users list:

1. Log in to Cloud Portal.
    

2. Click Users > Remove User
    

   
    
   The user's account record is deleted from the organization. Even if they are still assigned to the app in Okta, they can no longer log in because no corresponding account exists in Cloud Portal. 

Removing a User from the Hanwha Vision Cloud App (Okta IT Admin)

To unassigns a user from the Hanwha Vision Cloud app:

1. Log in to Okta and go to the Admin page.
    
2. In the navigate bar on the left, click Admin Console > Applications > Applications.
    
   
    
3. Select Hanwha Vision Cloud app.
   
   
    
4. Click the X by the username to remove. 
    
   

Deactivating a User (Okta IT Admin)

To deactivate a user:

1. Log in to Okta.
    
2. Navigate to Directory > People. 
   
   
    
3. Select the account to remove. 
   
   
    
4. Select More Actions > Deactivate.
   
   
   
   Although the user's name may still appear in Cloud Portal's user list, they will be unable to log in because Okta will deny the authentication request.