Single Sign-On (SSO) is a user authentication process that enables users to access multiple applications using a single set of login credentials. This simplifies the login process, making it faster and more secure for users. PlanStreet offers the convenience of SSO, allowing users to utilize their Microsoft or Google accounts for seamless access.
Following are the steps to use SSO:
1. Initial Login Screen:
Users are presented with the PlanStreet login page, offering the option to log in using Microsoft or Google SSO options, along with standard email and password entry fields.
2. Choosing a Provider:
Upon selecting an SSO provider, for example, like Microsoft, users are redirected to Microsoft's sign-in page, leveraging Microsoft's trusted authentication framework.
3. Entering Credentials:
Users enter their Microsoft or Google email credentials. If already logged into your chosen provider on the same browser, this step may be bypassed.
4. Completion of Authentication with Two-Factor Authentication (2FA):
Planstreet supports with Completion of Authentication with Two-Factor Authentication (2FA) meaning that after the user inputs their credentials, they may be prompted for a second form of identification. This adds an extra layer of security by requiring not only the password and username but also something that only the user has on them, such as a physical token or a temporary code sent to their mobile device or email (or whatever method you use for 2FA).
Note: If already logged into your chosen provider on the same browser, this step may be bypassed.
5. Google Permissions for PlanStreet
When utilizing the Single Sign-On (SSO) feature, particularly if you have logged out of your browser, PlanStreet app will request access to specific permissions within your Google account. These permissions are necessary for PlanStreet app to integrate its project management functionality with Google's services. Here is what PlanStreet app will be able to do with each permission:
Note: It is important to clarify that by agreeing to these permissions, users are allowing their individual accounts within PlanStreet to access these items, not PlanStreet as an entity.
-
Manage Google Drive files and folders: This permission allows PlanStreet app to see, edit, create, and delete all your Google Drive files. It is essential for accessing project documents and facilitating collaboration within PlanStreet app.
-
Manage Google Calendar: PlanStreet app needs to see, edit, share, and permanently delete all the calendars you can access using Google Calendar to synchronize deadlines and events with your project timelines.
-
Send Emails on Your Behalf: This permission is requested so PlanStreet app can send email notifications and updates regarding project tasks and milestones.
-
Manage Tasks: This enables PlanStreet app to create, edit, organize, and delete all your tasks in Google Tasks, aligning your to-do list with project requirements.
We understand the importance of maintaining the security and privacy of your data. PlanStreet app is committed to using these permissions solely for the purposes outlined and will not access your data without proper justification. You have full control over these permissions and can review or modify them at any time in your Google Account settings.
6. Direct Access to PlanStreet:
Post-authentication, users gain direct access to PlanStreet's platform, bypassing the need for separate PlanStreet login credentials.
Implementing SSO with 2FA via Microsoft and Google not only provides convenience and efficiency for users but also enhances security. It protects against compromised credentials, reduces the chances of phishing attacks, and simplifies the management of access control for IT departments. For users, it means a seamless transition between services without the hassle of remembering multiple passwords, creating a smoother and more secure user experience. PlanStreet's adoption of SSO with 2FA reflects its commitment to robust security and user-friendly design.