Subscribe to this blog for news and announcements about Altru.

Single Sign-On: New Workflows For User Management

Over the past few weeks, we've heard a lot of great questions around how admins can expect to be managing users after Single Sign-On is officially rolled out in October. Listed below are some guidelines on how to manage the most common scenarios going forward.

Adding a brand new user
Whether it's a new staff member, intern, or volunteer, when you have a new individual at your organization who needs access to Altru, the setup/invitation process will be the same.
  • Step One: First, your Blackbaud.com Site Administrator will send an invitation to the user through Blackbaud.com. The newly invited user should finish the steps necessary to create his or her Blackbaud ID before proceeding to the next step. Not sure who your Site Administrator is? Follow these steps to find out. 
  • Step Two: Once the Blackbaud ID is setup, your Altru System Role Administrator will send an invitation through Altru to the same email address used for the Blackbaud.com invite. Going forward, this process is handled under the Administration > Application Users section of Altru. The steps to add/invite a new user (and set Altru permissions) are outlined on page 2 of our Single Sign-On for Altru guide.
Completing these two steps ensures that the new user has a Blackbaud ID and is granted appropriate access to your Altru database.

Managing/resetting passwords
Previously, you had to manage Blackbaud ID passwords through Blackbaud.com, and Altru passwords through Altru. Going forward, there will only be one account and password to manage. If you need to reset your Blackbaud ID password, you can do so by following the steps outlined in our KB article: I forgot my Blackbaud.com password.
Note: As part of the enhanced security features with Single Sign-On, Altru admins will no longer have the ability to reset a user's password on their behalf. We encourage you to work with your IT team to ensure the email address noted in the KB article above is allowed into your email server.

Removing a user's access
When a user leaves your organization, it is important to remove their access from both Altru and Blackbaud.com. Note: Now in Altru, you can easily hide inactive users in the Application Users grid. From the Status column, click the funnel icon. Select all checkboxes, but leave Inactive clear. Click Apply. Then, only users who have a pending invitation status or are active will appear in the list.

For more information on Single Sign-On, refer to our dedicated tab in the Altru Community, and be sure to register for our webinar taking place tomorrow!
Posted by Jillian Lewis on Sep 26, 2017 12:02 PM America/New_York

Leave a Comment

Log in to post a comment.

The instructions to mark a user inactive in Altru do not seem to be correct. You can't get to "Application Users" from Administration - you have to select "Security" first.

Then when you do get there, unless I am missing something, there does not seem to be any way to mark a user inactive.

There is also no "status" column to filter on.

Am I in the wrong place?
  • Posted Tue 26 Sep 2017 12:47 PM EDT
Apologies - to be clear, these will be the new steps to follow after Single Sign-On has been turned on for your database. A majority of our posts so far have been around getting users prepared for SSO, but we've received a lot of questions around what to expect going forward, so we wanted to highlight those things here.
  • Posted Tue 26 Sep 2017 01:07 PM EDT
Thanks Jillian. Is there any way to get a head start on marking people inactive in Altru? 
  • Posted Tue 26 Sep 2017 04:30 PM EDT
Not yet, as this is new functionality that will be introduced in 4.98 (so it doesn't exist in your 4.97 databases just yet). After you are upgraded next month, you'll see these new options to mark users inactive, as well as the new Status column on the Application Users page. Hope that clears things up!
  • Posted Wed 27 Sep 2017 10:42 AM EDT
Single sign-on will be activated by Blackbaud, correct? Or is this something that we have to do manually?
 
  • Posted Tue 31 Oct 2017 12:13 PM EDT
Correct, Blackbaud ID/Single Sign-On will be available automatically once an organization is upgraded to version 4.98.
  • Posted Thu 02 Nov 2017 04:37 PM EDT