Single Sign-On (SSO)
Administrators can log into the Keystrike Admin Panel using Single Sign-On (SSO). SSO enables authentication via your organization’s Identity Provider (IdP).
Currently Microsoft Entra and Google are the supported identity providers.
It is recommended that you use SSO or password with MFA, and not only password to log into Keystrike's admin panel, for increased security.
Microsoft
Keystrike is a verified APP publisher in Microsoft. It depends on each tenant settings whether users can start using Keystrike Admin without prior consent or not. This is controlled under User Settings in Entra: https://portal.azure.com/#view/Microsoft_AAD_IAM/ConsentPoliciesMenuBlade/~/UserSettings
To ensure your users can login to the Keystrike Admin Panel using your organization’s account, please follow these steps:
Option 1: Grant Administrator Consent
1. Copy the Keystrike Admin Panel APP consent URL
- Copy the following url
2. Grant Consent:
- An administrator should navigate to this URL.
- Review and accept the permissions requested to grant consent on behalf of the organization.
Option 2: Adjust User Consent Settings
- Access User Consent Settings:
- Go to User Consent Settings in the Azure Portal.
- Configure Consent Options:
- Under "User consent for applications", select:
- Allow user consent for apps from verified publishers, for selected permissions (Recommended).
- Click Select permissions to classify as low impact and ensure the required permissions are included.
- Or choose:
- Allow user consent for apps to let users consent to any app accessing organizational data.
By completing these steps, your users will be able to seamlessly sign in to the Keystrike Admin Panel using Microsoft Entra Single Sign-On.
To enable your users to access the Keystrike Admin Panel using Google Workspace Single Sign-On (SSO) - especially when third-party app access is restricted - you need to add the Keystrike app to your allowed list. Follow these steps to configure your settings:
Steps to Allow Access to the Keystrike Admin Panel
Prerequisites
- Administrator access to your organization's Google Workspace Admin Console.
1. Access the Google Admin Console
- Sign in to the Admin console at admin.google.com using your administrator account.
2. Navigate to Security Settings
- From the Admin console Home page, click on Security.
- If Security isn't visible, select Show more at the bottom.
3. Go to API Controls
- In the Security section under Access and data control, select API controls.
4. Manage Third-Party App Access
- Under App access control, click on Manage Third-Party App Access.
5. Check Unconfigured App Access Settings
- Review the setting for Unconfigured app access:
- If "Don't allow users to access any third-party apps" is selected, you'll need to explicitly allow the Keystrike Admin Portal app.
6. Add the Keystrike Admin Portal App
- Click on Configure new app.
7. Search for the App
- In the Search input field enter the App’s clientId:
- 578873849483-mkms5gn56lc3iq5pu0li86jfneriuqhc.apps.googleusercontent.com
- Click Search.
8. Select the Keystrike Admin Portal
- The app named Keystrike Admin Portal will appear in the search results.
- Click the app.
9. Configure App Access Settings
- After selecting the app, set the Scope to either All users or select specific org units that should have access to the App.
- Click Continue.
10. Configure App Access Settings
- After selecting the app, set the Scope to either All users or select specific org units that should have access to the App.
- Click Continue.
- On the next screen under Access to Google Data section select Limited access since the App only requires basic user profile information.
- Click Continue and then Finish on the next screen after reviewing your configuration.
11. Confirm the App is Configured
- Back on the App access control page, verify that Keystrike Admin Portal is listed under Configured apps.
Support
If you need assistance or encounter any issues during the setup, please contact the Keystrike support team at [email protected].
By following these steps, your organization will enable users to seamlessly sign in to the Keystrike Admin Panel, even when general third-party app access is restricted.