Looks like you have to select at least one option, but that is how it would already be for registration now. The popup will go away as soon as they enter in the required fields.
Hi @Tyler_Harman,
Why are those fields required, if they log in using SSO? They haven’t set a password for ISC, they just open the URL and they are automatically logged on. If they need to reset their credentials, they will reset their domain password, not an ISC password.
Hi, good morning
Could u tell me the day of the release in prod?
We need to know cause our project schedule depends almost exclusively on that to go on
Thanks in advance
1 Like
Hi, I wanted to know if there is any news about the production release of this update, as it was mentioned that it would be available last week and we are still waiting to see the change reflected.
Any news?? @Tyler_Harman
Hi! Good morning.
We tested the invite in prod environment and something is not working well. When we click on “Register now” on the welcome/invite mail it redirects to the login page and not to change the password.
Juan
Are you using PTA? We’ve seen a few PTA customers who still need to reset the password instead of logging in directly. I can enable a flag to instead route users to the password reset screen to create a password. What is the tenant?
Tyler
Juan
This should be in prod for all tenants. What is your tenant so that I can verify that everything is as it should be?
Tyler
Hi Tyler
We’re currently using PTA
We need to redirect to reset password page for each new account created (cause we create a random password on AD account creations and we can not notify that password to users) so we need them to change the pass for their initial access to ISC but not for existing AD accounts.
Currently it is redirecting to login page for all accounts.
A couple of days ago when we sent the invites the behaviour was different. It used to redirect to reset password page with PTA activated.
Could u enable the flag for invites? In that way we will be able to use password reset with PTA
Thanks in advance
Juan
The flag has been applied to route users instead to the password reset screen.
Tyler
1 Like
Hi @adamian, I just came across your post and I didn’t see an answer to this.
When we just launched our tenant to the public we also intended to use SSO and the forced “registration” flow was a friction that our pilot users reported in early stages.
To resolve this, we reconfigured Identity Profiles settings for “Password reset & unlock methods” to send “verification code” to work email which is already populated by our HRIS. This means there is no registration step required, and end-users have a seamlessly SSO experience on their first login to SailPoint.
I agree with you that the above workaround shouldn’t be required if SSO was configured already, but I guess SailPoint has limited resources for all improvements going on and patching a hole for organizations using local credentials has more priority than addressing SSO authentication flows.
I hope that helps!
Elisa.
1 Like
Hi @eabedrapo1, thanks for your thoughtful answer and sharing your solution.
One thing that bothers me is that SailPoint mentions a lot of times that things “work as designed”, although it is clear that they should not work like that.
And calling everything an “improvement” just because something was changed is no excuse for not investing some time in actually fixing many of the features published.
1 Like
I guess there are too many changes happening behind the scenes, especially with Navigate coming in less than 2 months, so many corners might be cut to favor releases of the usual big announcements during the conference.
I do value the efforts to keep a fast pace with their development and I’ve seen a lot of progress/changes during this year participating in the community.
I have to admit that I’m not as hopeful/enthusiastic as I was at the beginning of my journey with the platform as we needed several hacks to overcome limitations/gaps in the product as the only “solution” received was to report the “idea” for future consideration and our timelines don’t go at the same pace as SailPoint’s.
That being said, I try to keep a close eye on announcements as some improvements were actually aligned to solutions we were expecting to find, such as the “Accounts” page which has greatly improved our account management.
1 Like