Users can use Single Sign-On (SSO) to log into MyMoveworks and access all applications from one portal. Your organization should have an SSO provider, which controls how you log into most of your applications.
We have detailed guides for common SSO setup experiences. Please ask your SSO administrator to complete the right guide for your organization.
We also have generic guides if you do not see your SSO provider listed here
There are two steps required to grant a user access
When your users ask for access to MyMoveworks, you can send them to your AI Assistant Chatbot. From there, you can rely on our plugins to grant the user access.
No. You can only access MyMoveworks experiences over SSO.
To make SSO possible, an identity provider (IdP) such as Okta or OneLogin must provide a central authentication server, which multiple applications can use to verify user identities. The authentication server validates user identities and confirms their identity to the application by providing an encrypted access token.
When a user first logs into an application, they are redirected to the IdP and are asked to provide their credentials, typically username and password.
For example, when signing in to an application, users can use two different identity providers to login: Application specific user name or Google. When users select one of the options, they are redirected to the relevant IdP to perform authentication.
The authentication server checks the user’s credentials against its central user directory, and if they are valid, starts an SSO session. Subsequently, the user can access the application for a predetermined period without logging in again.
When the user attempts to access another application from the trusted group, there is no need to request credentials again. The application requests authentication from the IdP, leveraging the open SSO session. The IdP provides an access token, and the application grants access to the user without showing the login screen again.
Here is an example of an SSO workflow:
A single login session is active for 7 days. If you are logged out, simply navigate to https://admin.moveworks.com/sso and sign in with your email address.
Your org’s login URL is dependent on your region. Replace org_name with the name of your Moveworks org name.