Enable SAML-based SSO to simplify the login process for CRM portal users

Enable SAML-based SSO to simplify the login process for CRM portal users

Availability
Editions: Enterprise and Ultimate
DCs: All

Help resources
Hello everyone,

Admins can now enable SAML-based SSO for portal users to ease the process of logging into the CRM portal. Previously, portal users had to create and manage a separate login. Now, organizations with an identity provider (IdP) can simplify external stakeholder access to the CRM portal.



Example
Let's say that a marketing agency uses the CRM's portal to engage with its clients and partners. The agency also provides them access to a project management tool and a design tool.

To streamline access across these related apps, the agency implements SAML SSO for its portal users. Once enabled, the following happens:
  • A client logs into the project management tool to check progress.
  • Since SSO is enabled, when the client accesses the CRM portal to check some information related to a deal, they don't need to enter their credentials again. They are automatically logged in.
  • The same applies for when they want to access the design tool to check a prototype. SAML-based SSO ensures that they can access these other apps without entering their credentials again.
Some benefits of using the SAML-based SSO method of authentication are:
  • Ease of remembering and managing login credentials
  • Simplified login process for portal users
  • Enhanced security due to centralized access control
  • Reducing the risk of password-related vulnerabilities
  • Ease of managing user access and permissions from a centralized identity management system

Choose the email field to which you want to send portal invitations


You have the option to choose a different email field for sending portal invitations to a specific user type. For example, if you have external legal consultants using the portal, you can send invitations to their secondary email address instead of their primary one. This can be useful when assistants handle CRM data entry for consultants. Similarly, a school may prefer to send portal invitations to a parent or guardian's email address stored in the Students module rather than the student's primary email address.

Please note that this preference is user type-specific and can be set in the following cases:
  • When you're about to finish creating a portal user type
  • When there are no portal users or portal forms added for that user type
Do let us know your feedback in the comments section below! Thanks and have a good day!