Enterprise Sign-In Help
What Is Enterprise Sign-In?
Enterprise sign-in lets users log in with your company's identity provider instead of creating a separate portal password. In security standards, this is called OpenID Connect (OIDC).
In plain terms: your users sign in with the same work account they already use, and your identity provider enforces MFA and password policy.
Why Use It?
- Users keep one familiar company login.
- MFA and account lockout are controlled centrally by your identity team.
- Faster onboarding and deprovisioning through your identity provider.
- Cleaner audit trail for sign-in events.
How To Configure It
- In your identity provider, create an OIDC application for the Easysoft tenant portal.
- Set the redirect/callback URL to:
https://portal.penstests.com/tenant/oidc/callback - In the Easysoft admin portal, open Identity (global) or Tenant Settings (tenant-specific) and enable OIDC.
- Fill in issuer, authorization endpoint, token endpoint, JWKS URL, and client ID.
- Store the client secret in the configured server environment variable (do not paste secrets into reports or tickets).
- Run a test sign-in and verify user-to-tenant mapping before broad rollout.
What You Need From Your Identity Team
- Identity provider app registration details (issuer + endpoints).
- Client ID and client secret variable name.
- User claim mapping for username/email and tenant mapping.
- MFA requirement policy for this application.