Ravnur adds users to an application either automatically through single sign-on or manually through the Admin Portal. Which method applies depends on the identity provider your organization uses.
This article covers both methods, and the identifiers Ravnur creates for a user regardless of how they were added.
In this article:
Automatic creation through SSO
Concepts
The following terms appear throughout this article:
| Term | Description |
|---|---|
| Single sign-on (SSO) | A login method that lets a user access multiple applications after signing in once, verified by an identity provider. |
| OAuth | An authentication method used by social identity providers such as Google, Microsoft, or Facebook. |
| Identity provider | The system that authenticates a user and supplies their account information to Ravnur. |
| Display name | The name shown for a user in the application interface. |
| Username | The unique identifier for a user account. |
Automatic creation through SSO
If SSO is enabled for an application, users are added automatically the first time they log in. During SSO configuration, the organization defines a default role and a default application for its users. An administrator can update the assigned role or default application later in the Admin Portal.
The identity provider passes the user's information from the corporate directory to Ravnur. Ravnur limits this information to:
- First name
- Last name
- Email address
- UID (unique identifier; optional, since the email address can also serve as a unique identifier)
Manual creation with OAuth
Social identity providers such as Google, Microsoft, or Facebook don't provision users automatically. If an application uses one of these OAuth providers, an administrator must create the user in the Admin Portal before the user can log in.
When a user signs in through an OAuth provider, the identity provider authenticates them and redirects them to the Ravnur application. Ravnur grants access only if the user is already registered and active (not disabled or deleted).
The user's email address must match the address registered with the OAuth provider, or the application denies access.
To create a user manually, see How to add a user.
User identifiers
Ravnur creates 2 identifiers for a user, regardless of how the user was added:
- Display name. The name shown for a user in the application. The user can change it at any time, and it isn't unique. By default, it's set to the first and last name provided by the identity provider, or the name entered when the user is created manually.
- Username. The unique identifier for a user account. It doesn't appear in the interface. Depending on the identity provider configuration, it's either the UID or the email address. For a manually created user, it defaults to the part of the email address before the "@" and stays fixed after creation. Usernames can include letters (a-z), numbers (0-9), dots, dashes, and underscores.