Self-Service SSO Ticket Creation Process
Auth0 offers customers the possibility to self-configure the required connections independently, without much input or effort from us. This is done via the Self Service. Once a short simple configuration is set, the connection responsible for handling the authentication is created on the tenant and is seamlessly integrated within our setup.
Profile creation
The profiles for self service tickets creation ara configured via the Terraform Provider repository. Here's an example PR for this
Ticket creation Steps
Find the Self Service SSO section at the bottom of the Enterprise Connection section.
There is two different profiles for SAML connections, academia and professional accounts. Select the one corresponding for the case by clicking on the ... -> Generate ticket.
Create a ticket for a new connection
Proceed by selecting the 'Create a new connection' option.
Specify a meaningful connection name, make sure to always follow these conventions:
- Use hyphens to separate name parts (e.g., "company-name").
- For companies, use the full company name, avoiding abbreviations (e.g., "boston-consulting-group" instead of "bcg").
- For universities, use their full name (e.g., "university-of-oklahoma").
- Do not prefix with IdP names (e.g., avoid "okta-newsuk").
- Do not include dates or timestamps in the connection name (e.g., avoid "hr_july_2024").
- Optional: You may append the IDP name if known (e.g., "university-of-oklahoma-okta").
Specify a descriptive display name, as a rule of thumb use the full company name (e.g. "My awesome company Ltd.").
Enable the auth0 Statista application in the 'Enable Clients' section by inserting the ID of the application. This will ensure that the connection is going through this application. ID: xjVF0FFWFPOcG7XJO8C0XleeRPllUFfI
On the bottom under 'Metadata' section, add the group account associated to the customer (Note: this account needs to exist in the legacy database, thus the CSM would need to create everything first via CRM or otherwise). Use statista_group_account_id as the key, and the id of the created user in the user database. Important! Click the "+ Add" button to add the entry before proceeding!
Provide this ticket link to the customer.
⚠️ WARNING By default, access ticket URLs remain valid for five days after generation. After accessing the ticket URL, the customer admin has five hours to complete their setup. An access ticket URL can be accessed a maximum of 10 times; once this limit is reached, a new access ticket must be requested.
If needed, you can revoke an access ticket prior to its expiration to immediately cease access to the self-service assistant.
source: Manage Self-Service SSO
Create a ticket to edit a connection
In exceptional cases, the customer might have finalized the account creation process but might need to update information like certificates or access urls, for this cases, it is possible to create a ticket to edit an existing connection.
The only information necessary for this is the auth0 connection name (e.g. my-awesome-company).
