Single Sign-On with SNF Metrics

Single Sign-On with SNF Metrics

SNF Metrics allows single sign-on (SSO) with Microsoft Entra. 

Setting Up Single Sign-on

  1. Go to Setting>SSO. (Users can be given access to the SSO settings page under their user permissions.) This page displays all email domains currently in use within your organization. 
  2. Review each of these domains.
  3. When the domain is a valid Microsoft domain, turn the toggle switch to ON. This allows users with email addresses from that domain to log in to SNF Metrics using SSO.
  4. Once SSO is enabled for a domain, you can choose to restrict all users within that domain to SSO. Enabling this restriction means users can only log in using SSO and not with their SNF Metrics username and password.

Restricting Specific Users to SSO

To restrict an individual user to SSO, go to their user settings page and check off "Restrict to SSO". You can also uncheck this box to allow exceptions to the domain-wide SSO restriction.



Logging In

  1. Users whose email domains are not enabled to log in with SSO can only sign in with their SNF Metrics username and password.
    1. They will be blocked if they try to click on the "Login with Microsoft" button
  2. Users whose email domains are enabled to log in with SSO, can either:
    1. Log in with their username and password
    2. Click on the button "Login with Microsoft"- be sure to use your company assigned email. Personal emails will not work.
  3. Users that are restricted to SSO can only click on the button "Login with Microsoft". 
    1. They will be blocked if they try to use their Username and Password
If it's the first time that a user from a specific email domain logs in to SNF Metrics with SSO, the domain admin will need to provide admin consent (see here). To prevent any interruptions, it's best for a user with admin privileges to log in first and provide consent in advance.



Multi Organization Access

If your SNF Metrics' user profile uses the same email address across multiple organizations, you can log in with SSO and easily switch between organizations using the dropdown menu in the header.



Benefits of SSO

  1. Users do not have to remember their username and password associated with their SNF Metrics account.
  2. Users that have multiple organizations within SNF Metrics (and their user profile has the same email address in all the organizations) can log in once and then easily switch between the organizations. 
  3. Users that are restricted to SSO can easily be blocked from accessing SNF Metrics by disabling them from the Microsoft Entra directory.
The user will still be a user on SNF Metrics but they will not be able to log in. It is recommended that they get disabled as well in SNF Metrics.




    • Related Articles

    • Grievance Log Settings

      In this article: Mapping Departments to User Roles and Grievance Categories How to map Departments to User Roles and Grievance Categories Add New Grievance Categories and Departments Only users with the permission "Edit Grievance Log Settings" can ...

    • User Settings and Permissions

      In this article: How to add a user to SNF Metrics Profile Information Access to Facilities, Apps & Permissions, and Reports Reset Password in User Settings Who can give access? Deactivate Users Why are updated user permissions not immediately ...

    • Risk Reporter Permissions

      In order for users to maximize the Risk Reporter App, it is important to understand the permissions that need to be granted to the different Roles or individual users that work with the Risk Reporter App. See Roles Settings and User Settings and ...

    • Roles Settings

      In this article: What is Roles Settings? How to set up Roles What is Roles Settings? The Roles settings feature allows you to predefine the access and permissions of specific roles. This is useful when creating a new user, as you can choose the most ...