Single Sign-On: New Workflows For User Management

Over the past few weeks, we've heard a lot of great questions around how admins can expect to be managing users after Single Sign-On is officially rolled out in October. Listed below are some guidelines on how to manage the most common scenarios going forward.

Adding a brand new user
Whether it's a new staff member, intern, or volunteer, when you have a new individual at your organization who needs access to Altru, the setup/invitation process will be the same.

• Step One: First, your Blackbaud.com Site Administrator will send an invitation to the user through Blackbaud.com. The newly invited user should finish the steps necessary to create his or her Blackbaud ID before proceeding to the next step. Not sure who your Site Administrator is? Follow these steps to find out. 
• Step Two: Once the Blackbaud ID is setup, your Altru System Role Administrator will send an invitation through Altru to the same email address used for the Blackbaud.com invite. Going forward, this process is handled under the Administration > Application Users section of Altru. The steps to add/invite a new user (and set Altru permissions) are outlined on page 2 of our Single Sign-On for Altru guide.

Completing these two steps ensures that the new user has a Blackbaud ID and is granted appropriate access to your Altru database.

Managing/resetting passwords
Previously, you had to manage Blackbaud ID passwords through Blackbaud.com, and Altru passwords through Altru. Going forward, there will only be one account and password to manage. If you need to reset your Blackbaud ID password, you can do so by following the steps outlined in our KB article: I forgot my Blackbaud.com password.
Note: As part of the enhanced security features with Single Sign-On, Altru admins will no longer have the ability to reset a user's password on their behalf. We encourage you to work with your IT team to ensure the email address noted in the KB article above is allowed into your email server.

Removing a user's access
When a user leaves your organization, it is important to remove their access from both Altru and Blackbaud.com.

• Step One: Mark the user "inactive" in Altru. This allows you to remove their access to Altru, but retain a history of their actions. To mark a user inactive, simply go to Administration > Application Users. Expand the user, then click Mark inactive.
• Step Two: Remove the user's association with your organization on Blackbaud.com.

Note: Now in Altru, you can easily hide inactive users in the Application Users grid. From the Status column, click the funnel icon. Select all checkboxes, but leave Inactive clear. Click Apply. Then, only users who have a pending invitation status or are active will appear in the list.

For more information on Single Sign-On, refer to our dedicated tab in the Altru Community, and be sure to register for our webinar taking place tomorrow!