{"id":1539,"date":"2023-11-21T08:03:26","date_gmt":"2023-11-21T08:03:26","guid":{"rendered":"https:\/\/strange-sammet.82-165-59-152.plesk.page\/?page_id=1539"},"modified":"2025-04-16T08:47:26","modified_gmt":"2025-04-16T08:47:26","slug":"manage-groups","status":"publish","type":"page","link":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/miscellaneous\/for-it-administrators\/single-sign-on\/manage-groups\/","title":{"rendered":"Manage groups for single sign-on authentication users"},"content":{"rendered":"<div class=\"wp-block-image\">\n<figure class=\"alignright size-large is-resized\"><a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"510\" src=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en-1024x510.png\" alt=\"Screenshot of the Manage groups tab in the Company management\" class=\"wp-image-1551\" style=\"width:250px\" srcset=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en-1024x510.png 1024w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en-300x150.png 300w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en-768x383.png 768w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en-1536x766.png 1536w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-manage-groups-en.png 2022w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">Manage groups<\/figcaption><\/figure>\n<\/div>\n\n\n<p>Users that use single sign-on (SSO) to authenticate with alfaview can be assigned to groups in the external Identity provider (IdP). These groups can be mapped to groups with specific permissions in alfaview and can be assigned to alfaview rooms and departments. This helps in managing large numbers of users in alfaview.<\/p>\n\n\n\n<div style=\"height:1px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-alfaview-callout\">\n<p>To configure this setting, you will need the permission to&nbsp;<strong>manage company settings<\/strong>. Additionally, the company needs to have its own custom subdomain to access this feature.<\/p>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"creating-groups\">Creating groups<a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/en\/administration\/single-sign-on\/manage-groups\/#creating-groups\"><\/a><a href=\"#creating-groups\" class=\"av-heading-anchor\"><i class=\"bi bi-link\"><\/i><\/a><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-large is-resized\"><a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"785\" src=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en-1024x785.png\" alt=\"Screenshot of the Create group window with all setting options\" class=\"wp-image-1547\" style=\"width:250px\" srcset=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en-1024x785.png 1024w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en-300x230.png 300w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en-768x589.png 768w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en-1536x1178.png 1536w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-create-group-en-2048x1570.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">Create group<\/figcaption><\/figure>\n<\/div>\n\n\n<p>In the&nbsp;<a href=\"\/en\/administration\/general\/adminstration-interface\/\">administration interface<\/a>, navigate to account management &gt; Manage groups. Click <button class=\"av-button av-button--primary\">Add<\/button> and fill in the required fields.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Name:<\/strong>&nbsp;A name that will only be visible in this interface, an easy way to assign meaning to a group. (Example: Students, Teachers, etc)<\/li>\n\n\n\n<li><strong>External ID:<\/strong>&nbsp;A unique ID that is managed by the IdP and will be sent on each login. It must exactly match the group from the IdP response and cannot be empty. Also this value is unique: no two alfaview groups can have the same external ID.<\/li>\n\n\n\n<li><strong>Create user profile:<\/strong>&nbsp;If enabled, for all users that belong to this group, the system will generate an alfaview profile when they authenticate for the first time. This is required in order to give those users elevated administration permissions on the admin web interface. The profile data will be retained in alfaview.<\/li>\n\n\n\n<li><strong>Permissions:<\/strong>&nbsp;The selected permissions will be granted to all users belonging to this group.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-alfaview-callout\">\n<p>These permissions are&nbsp;<strong>always granted globally<\/strong>&nbsp;and cannot be restricted to a room or a department.<\/p>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"editing-groups\">Editing groups<a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/en\/administration\/single-sign-on\/manage-groups\/#editing-groups\"><\/a><a href=\"#editing-groups\" class=\"av-heading-anchor\"><i class=\"bi bi-link\"><\/i><\/a><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-large is-resized\"><a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"803\" src=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en-1024x803.png\" alt=\"Screenshot of the Edit group window with all setting options\" class=\"wp-image-1549\" style=\"width:250px\" srcset=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en-1024x803.png 1024w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en-300x235.png 300w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en-768x602.png 768w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en-1536x1205.png 1536w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-edit-group-en-2048x1606.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">Edit group<\/figcaption><\/figure>\n<\/div>\n\n\n<p>Existing groups can be edited via the group list on the main page. Click the triple dot menu for the related group, and select&nbsp;<strong>Edit<\/strong>. All options that are available in the Add dialog are also available in this dialog.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"deleting-groups\">Deleting groups<a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/en\/administration\/single-sign-on\/manage-groups\/#deleting-groups\"><\/a><a href=\"#deleting-groups\" class=\"av-heading-anchor\"><i class=\"bi bi-link\"><\/i><\/a><\/h2>\n\n\n\n<p>Existing groups can be deleted via the group list in the main page. Click the triple dot menu of the related group, and select&nbsp;<strong>Delete<\/strong>. A confirmation dialog will be shown. The delete action cannot be reverted, and the group must be recreated from start if needed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"assigning-groups-to-departments\">Assigning groups to departments<a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/en\/administration\/single-sign-on\/manage-groups\/#assigning-groups-to-departments\"><\/a><a href=\"#assigning-groups-to-departments\" class=\"av-heading-anchor\"><i class=\"bi bi-link\"><\/i><\/a><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-large is-resized\"><a href=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"518\" src=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en-1024x518.png\" alt=\"Screenshot of the Assign group to departments window with all setting options\" class=\"wp-image-1545\" style=\"width:250px\" srcset=\"https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en-1024x518.png 1024w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en-300x152.png 300w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en-768x388.png 768w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en-1536x777.png 1536w, https:\/\/cp-prod-wordpress.alfa.sx\/wp-content\/uploads\/2023\/11\/sso-assign-group-en.png 1550w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">Assign group<\/figcaption><\/figure>\n<\/div>\n\n\n<p>Existing groups can be assigned to departments via the group list on the main page.<br>Click the <button class=\"av-button av-button--primary\">Assign<\/button> button of the related group. The assign dialog will be displayed.<br>All existing assignments can be edited or deleted on this page.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>To assign:<\/strong>&nbsp;Select a department from the dropdown list, select the permission level for this department and click <button class=\"av-button av-button--primary\">Add to department<\/button>.<\/li>\n\n\n\n<li><strong>To unassign:<\/strong>&nbsp;Click the trashcan icon for the related department.<\/li>\n\n\n\n<li><strong>To edit permission level:<\/strong>&nbsp;Click the dropdown for the related department and select a new permission.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Users that use single sign-on (SSO) to authenticate with alfaview can be assigned to groups in the external Identity provider (IdP). These groups can be mapped to groups with specific permissions in alfaview and can [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":1509,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1539","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/pages\/1539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/comments?post=1539"}],"version-history":[{"count":10,"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/pages\/1539\/revisions"}],"predecessor-version":[{"id":1540,"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/pages\/1539\/revisions\/1540"}],"up":[{"embeddable":true,"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/pages\/1509"}],"wp:attachment":[{"href":"https:\/\/cp-prod-wordpress.alfa.sx\/en\/wp-json\/wp\/v2\/media?parent=1539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}