diff --git a/blog-service/2025-02-21-manage.md b/blog-service/2025-02-21-manage.md new file mode 100644 index 0000000000..f00066a087 --- /dev/null +++ b/blog-service/2025-02-21-manage.md @@ -0,0 +1,15 @@ +--- +title: Single Sign-on for Child Organizations (Manage) +image: https://help.sumologic.com/img/sumo-square.png +keywords: + - manage + - organizations + - mssps +hide_table_of_contents: true +--- + +import useBaseUrl from '@docusaurus/useBaseUrl'; + +icon + +Enabling SSO for child organizations makes moving between organizations under your authority much more seamless and convenient. We are excited to announce that single sign-on (SSO) is now automatically enabled when you create child organizations, allowing you to sign in to child organizations without having to provide separate credentials. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings/#sso-for-child-organizations). \ No newline at end of file diff --git a/docs/api/organizations-management.md b/docs/api/organizations-management.md index 97fefd08ca..36324e1d6e 100644 --- a/docs/api/organizations-management.md +++ b/docs/api/organizations-management.md @@ -11,7 +11,7 @@ import ApiRoles from '../reuse/api-roles.md'; icon -With the Organizations Management API, you can get the credits usage details of the child organizations. For more information, see [Manage Organizational Settings](/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings). +With the Organizations Management API, you can get the credits usage details of the child organizations. For more information, see [Manage Organization Settings](/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings). ## Documentation diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings.md index f72650fee8..5092c1eb0a 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings.md @@ -1,8 +1,8 @@ --- id: manage-org-settings -title: Manage Organizational Settings +title: Manage Organization Settings sidebar_label: Manage Org Settings -description: An account owner can update org names, define customized subdomain names, delete orgs, and change the account owner. +description: An account owner can update organization names, define customized subdomain names, delete orgs, and change the account owner. keywords: - subdomain - orgs @@ -18,7 +18,9 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; | Cloud Flex | Professional, Enterprise | | Cloud Flex Credits | Enterprise Operations, Enterprise Security, Enterprise Suite | -This page has information about the options available to your Sumo Logic account owner on the **Account Overview** tab. The options are at the top of the page under the details icon. +## Change organization settings on the account + +This section has information about the options available to your Sumo Logic account owner on the **Account Overview** tab. The options are at the top of the page under the details icon. For Cloud Flex Credits: @@ -28,7 +30,7 @@ For Cloud Flex: Manage Organization links -## Change organization name +### Change organization name 1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Account > Account Overview**.
[**New UI**](/docs/get-started/sumo-logic-ui/). In the top menu select **Administration**, and then under **Account** select **Account Overview**. You can also click the **Go To...** menu at the top of the screen and select **Account Overview**. 1. Access the appropriate menu for your [account type](#availability): @@ -37,7 +39,7 @@ For Cloud Flex: 1. At the prompt, enter a new organization name in the text field. 1. Click **Change Organization Name.**
Change_Organization_Name_prompt.png -## Change account owner +### Change account owner :::important After you make this change, you will not be able to edit the account owner. @@ -54,7 +56,7 @@ After you make this change, you will not be able to edit the account owner. If the account owner leaves your organization and you cannot transfer the account ownership, please [submit a support ticket](https://support.sumologic.com/support/s) to transfer the account ownership. ::: -## Delete an organization +### Delete an organization :::note You can only delete an organization for Free and Trial accounts. @@ -65,7 +67,6 @@ You can only delete an organization for Free and Trial accounts. 1. In the prompt dialog, enter **DELETE** in the text field to confirm the action. 1. Click **Delete**.
Delete_Organization_prompt.png - ## Set up a custom subdomain This section has instructions for setting up a custom subdomain for the URL you use to access Sumo Logic. @@ -108,3 +109,37 @@ You must be the account owner of the Sumo Logic account to change the account su 1. Enter a new subdomain name. The name must be between 4 and 63 characters in length at least four characters in length, and can contain lower case letters, numbers, and dashes only.
change-subdomain-name.png 1. Click **Change Subdomain** Name to update the name. 1. You will be automatically logged out and redirected to the new subdomain login page.  + +## SSO for child organizations + +When you create a new child organization, a subdomain is automatically created and single sign-on (SSO) is enabled, allowing you to sign in to the child organization without having to provide separate credentials. + +### Enabling or disabling SSO + +#### Enable SSO + +If a [subdomain](#set-up-a-customsubdomain) exists, but SSO is disabled for the child organization, click **Enable SSO**:
Enable SSO button + +If there is no subdomain defined for a child organization, hovering your mouse over the **Enable SSO** button displays the message **Set up custom subdomain before enabling SSO**:
No subdomain defined + +To set up a custom subdomain for the child organization, see [Set up a custom subdomain](#set-up-a-customsubdomain) above. Once you set up the subdomain, the subdomain's URL will appear and the **Enable SSO** button will be clickable. + +#### Disable SSO + +When a child organization has SSO enabled, the child organization's details display the subdomain URL in the **Subdomain** field, and the **SSO** field says **Enabled**:
SSO enabled for a child organization + +If you want to require administrators to enter credentials to sign in to the child organization, click **Disable SSO** to turn off single sign-on. + +### Sign in to a child organization automatically + +When you open the details of a child organization, a link to the child organization appears under **Basic Details**. When you click the link, you are automatically signed in to the child organization. + +Automatic sign-in works because when you created the child organization, a [subdomain](#set-up-a-customsubdomain) was automatically added, and SSO was enabled by default. As a result, you are already provisioned as a user in the child organization and can access it at any time without needing to log in. + +SSO enabled for a child organization + +### Sign back in with parent organization credentials + +As an administrator, if you log out of a child organization with SSO enabled, the following screen appears. Click **Login with Parent Org** to sign back in automatically using your parent organization credentials. + +Login with Parent Org button \ No newline at end of file diff --git a/docs/manage/security/set-max-web-session-timeout.md b/docs/manage/security/set-max-web-session-timeout.md index cfda319aa0..feb4bfe5b5 100644 --- a/docs/manage/security/set-max-web-session-timeout.md +++ b/docs/manage/security/set-max-web-session-timeout.md @@ -6,7 +6,7 @@ description: Learn how to set the maximum web session timeout that a Sumo Logic import useBaseUrl from '@docusaurus/useBaseUrl'; -Sumo Logic users can set their web session timeout on the **Preferences** page, up to a maximum of 7 days. If you are a Sumo Logic admin with the **Manage Organizational Settings** role capability, you can specify the maximum web session timeout period that users in your org can select. The period you choose controls what values appear on the **Web session timeout** pulldown on a user’s **Preferences** page.  +Sumo Logic users can set their web session timeout on the **Preferences** page, up to a maximum of 7 days. If you are a Sumo Logic admin with the **Manage Organization Settings** role capability, you can specify the maximum web session timeout period that users in your org can select. The period you choose controls what values appear on the **Web session timeout** pulldown on a user’s **Preferences** page.  When you change the maximum timeout: diff --git a/static/img/manage/subscriptions/enable-sso-button.png b/static/img/manage/subscriptions/enable-sso-button.png new file mode 100644 index 0000000000..13788506e6 Binary files /dev/null and b/static/img/manage/subscriptions/enable-sso-button.png differ diff --git a/static/img/manage/subscriptions/mssp-login-with-parent-org.png b/static/img/manage/subscriptions/mssp-login-with-parent-org.png new file mode 100644 index 0000000000..21556e38d5 Binary files /dev/null and b/static/img/manage/subscriptions/mssp-login-with-parent-org.png differ diff --git a/static/img/manage/subscriptions/mssp-sso-enabled.png b/static/img/manage/subscriptions/mssp-sso-enabled.png new file mode 100644 index 0000000000..e788bba447 Binary files /dev/null and b/static/img/manage/subscriptions/mssp-sso-enabled.png differ diff --git a/static/img/manage/subscriptions/no-subdomain-defined.png b/static/img/manage/subscriptions/no-subdomain-defined.png new file mode 100644 index 0000000000..625f8fe7bb Binary files /dev/null and b/static/img/manage/subscriptions/no-subdomain-defined.png differ diff --git a/static/img/manage/subscriptions/subdomain-and-sso-enabled.png b/static/img/manage/subscriptions/subdomain-and-sso-enabled.png new file mode 100644 index 0000000000..b947ad0f7c Binary files /dev/null and b/static/img/manage/subscriptions/subdomain-and-sso-enabled.png differ