About

Sign-in settings control how the people in your company sign in to ControlMap. Username and password sign-in is always available. A Super Admin can also switch on Sign in with Google, Sign in with Microsoft, or SAML 2.0 single sign-on (SSO) for the whole company, so users can sign in with the accounts they already use at work.

Each user then has their own sign-in method, and you can see it for everyone in one list.

See how each user signs in

The Users page shows the sign-in method for every user:

1. Select your company name at the top left, then select Account Settings.
2. Select Users.
3. Check the Sign in column. It shows each user's method, for example Username/Password, Google, Microsoft, or SSO.

Turn on Google, Microsoft, or SAML 2.0 SSO

You choose the sign-in options for the whole company in the Sign in settings card at the bottom of the Users page. Only a Super Admin can change them.

1. Select your company name at the top left, then select Account Settings › Users.
2. Scroll down to Sign in settings.
3. Tick the options you want to offer:
   • Enable sign in with Google. Use this if your company uses Google Workspace. Users can sign in with their Google email account.
   • Enable login with Microsoft. Use this if your company uses Microsoft Teams. Users can sign in with their Office 365 or Microsoft email account.
   • Enable SAML 2.0 SSO. Use this to set up single sign-on with an enterprise identity provider such as Azure AD or OneLogin.
4. To choose the method new users start with, select Set as default next to it. The button then reads Default. A method that is switched off can't be the default.
5. Select Save. A message confirms "Sign In preferences saved successfully".

Set up SAML 2.0 single sign-on

When you tick Enable SAML 2.0 SSO., a card called Additional settings for SAML 2.0 SSO appears below Sign in settings. Complete it as follows:

1. Download ControlMap's metadata .xml and load it into your identity provider.
2. Pick your identity provider.
3. Complete these fields. All of them are required:
   • SP Entity Id / Audience URL
   • IdP Entity Id / Issuer URL
   • SAML 2.0 Endpoint (POST) / Sign In URL
   • SLO Endpoint / Logout URL
   • X.509 Certificate (with SHA-512 signature algorithm)
4. Select Save.

Users who sign in with SSO then use the Sign In with SSO button on the ControlMap sign-in page.

Change a user's sign-in method

A user's sign-in method can be changed in three ways:

• Edit the user on the Users page.
• Select several users in the list and use the Update sign-in preference box that appears.
• Users change their own method in My SignIn Preferences, described below.

Whichever way it is changed, the user is signed out so they can sign in the new way.

Choose your own sign-in method

If your company has switched on another sign-in method, you can choose which one you use:

1. Select your company name at the top left, then select My Profile.
2. Scroll to My SignIn Preferences.
3. Choose a method in the SignIn Preferences list.
4. Select Update Preferences. A warning tells you that you will be logged out of your current session. You are then signed out, and you sign in again with the new method.

My SignIn Preferences is shown to Super Admins, Compliance Managers, and Compliance Portal Users.