Skip to content

Commit f775414

Browse files
Apply suggestions from code review
1 parent 707998d commit f775414

File tree

1 file changed

+5
-9
lines changed

1 file changed

+5
-9
lines changed

src/segment-app/iam/sso.md

Lines changed: 5 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -98,21 +98,17 @@ Enter your domain and click "Add Domain." When you click verify, you're given tw
9898
> **Note**: domain tokens expire 14 days after they are verified.
9999
100100
## Configuring SSO to access multiple workspaces
101-
To configure SSO for multiple workspaces, your admin must configure access to each workspace as a separate app in your identity provider.
101+
To configure SSO for multiple workspaces, your admin must configure access to each workspace as a separate app in your identity provider. You are unable to use verified domain(s) across multiple workspaces and will encounter the following error if you add a domain that is already verified in another workspace:
102102

103-
This is because, you are unable to use verified domain(s) across multiple workspaces, and you will encounter this error if you try adding a domain that is already verified in another workspace:
104103

105104
> warn ""
106105
> **Warning**: This domain has already been claimed.
107106
108-
Once your admin has configured separate apps for each workspace in your IdP, the end-users can log in to the IdP and click on the relevant app (or tile) for the workspace you are trying to access (also referred as IdP-initiated SSO).
107+
Once your admin has configured separate apps for each workspace in your IdP, the end-users can log in to the IdP and click on the relevant app for the workspace you are trying to access. This is also referred to as IdP-initiated SSO.
109108

110-
Limitations:
111-
> note ""
112-
> **Note**: As you are only able to verify the domain(s) in one of the workspaces, your users will only be able to log in to the workspace in which the domain has been verified when logging in via Segment’s Login page.
113-
114-
> note ""
115-
> **Note**: Switching a workspace directly within Segment UI will not work, and the users will have to switch workspaces using IdP-initiated SSO.
109+
Two limitations do exist when multiple workspaces are configured to SSO access:
110+
- Users will only be able to log in to the domain-verified workspace on Segment’s login page.
111+
- Users must switch workspaces using IdP-initiated SSO, as they are unable to switch directly using the Segment UI.
116112

117113
## SSO Frequently Asked Questions
118114

0 commit comments

Comments
 (0)