Single sign-on

With single sign-on, your organization controls access to Prescient AI from its own identity provider. People sign in there. The Members tab then says that membership and roles come from the identity provider.

How do you sign in?

You sign in through your identity provider. If you ask for a code or type a password on the sign-in page of Prescient AI, the page tells you that your organization uses single sign-on and that you must sign in through your identity provider.

If you cannot sign in there, the page tells you to contact your IT administrator. Access is given at the identity provider, not in Prescient AI.

What changes on the Members tab?

The Members tab still lists each person who has access. The description of the tab says that the people are provisioned by your identity provider, and the tab shows this notice:

Managed by single sign-on. Membership and roles for this workspace come from your identity provider and refresh each time someone signs in. To add, remove, or change someone’s access, update their assignment or group there.

The Invite member button and the actions menu of each row are not there, for an Admin too.

Why are invitations and role changes disabled?

The notice on the tab says that membership and roles come from your identity provider and refresh each time a person signs in. The tab has no controls to change them, so the identity provider is the one place where you set access.

The product also refuses an invitation to an email on a domain that uses single sign-on. The Invite member dialog then says that access is granted through the identity provider, not by invitation.

What does not change?

• The two roles, Admin and Viewer, and what each one can do. See Roles and members.
• The other tabs of the Settings page.
• The Account page.