Identity Providers are used to authenticate the user to the system. There are three different identity provider types: Internal, OpenID Connect SSO (OIDC) and Basic API Access.
Internal providers will require a password from the user with the option of configuring multi-factor authentication (MFA). They can be configured with a custom password policy, as well as requiring all users to use MFA.
OIDC providers are used to authenticate users via an external platform. They are configured with a URL and Client ID. When users go to sign in, they will be redirected to initially to the 3rd party to authenticate. Afterwards, they will be able to sign in to MFGx using just their email.
Basic API Access providers will require a password from the user. It can only be used to access the API and should be used only when the length of the API key is too long for the provider to accept. More information can be found here:
Open the Fuuz app.
Select the MFGx dropdown menu.
Select the System option.
Select the Access Control option.
Select the Identity Providers option.
From here, it is possible to perform the following task or tasks.
- Search for an identity provider.
- Create an identity provider.
- Edit an identity provider.
- Delete an identity provider.
Creating a new identity provider is simple.
- Navigate to the “Identity Providers” table
- Click on the “+” button to create a new identity provider
- Create a Name for the identity provider
- Select a Identity Provider Type from the dropdown
- Click on the “+” to finalize the creation of the identity provider
To edit an identity provider, start by clicking on the Id field of the identity provider you want to edit. This will open up to a form containing all of the settings.
- The left most panel give the basic information regarding the identity provider.
- The middle panel is labeled Configuration and this is where the settings are.
- Minimum Length sets the minimum amount of characters that a user can have in their password.
- Maximum Length sets the maximum amount of characters that a user can have in their password.
- Require Mixed Case requires users to use a mix of both uppercase and lowercase characters in their password.
- Require Number requires users to have at least one 0-9 character in their password.
- Require Symbol requires users to have at least one special character in their password.
- Expires in Days will require user’s to change their password every x number of days.
- Require Multi-Factor Authentication requires all user’s to use some form of multi-factor authentication. The default is set to use Email.
- Prevent Password Reuse prevents users from using the same password again after changing it.
- The right most panel is labeled History and showcases who and when created the identity provider, as well as who last edited it.
There are also few options that can be changed for each user individually.
- Navigate to the Users tab at the top
- Select the user you are trying to edit
- Click on the “Pencil” button to open the edit menu
- Force Password Change will require the user to create a new password next time they login to the system.
- Multi-Factor Authentication Methods dictate the way in which the user will receive their login token.
- Email will send a 6 digit code to their email when trying to login.
- Mobile App will require the setup of a 3rd party application to generate a 6 digit code.
- Click on the “Save” button to save the changes.
For more information on how to configure multi-factor authentication, check out the full guide here: