Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2023-06-23
Example: Alternate Sign-In Option for OfficeConnect

Example: Alternate Sign-In Option for OfficeConnect

This example illustrates 1 way to configure an authentication selector that enables users to select a different sign-in flow when their usual sign-in isn't desirable.
The desired authentication flow at your company, Global Modern Services (GMS), redirects users to:
  • Your SAML Identity Provider (IdP) for Single Sign-On when they access your company URL from a browser that Workday recognizes as a standard computer.
  • The GMS sign-in page when they access your company URL from a browser that Workday recognizes as from a mobile device.
For users who access OfficeConnect, however, this sign-in flow isn’t appropriate. In this case, Workday needs to redirect them to the SAML IdP, even if coming from a computer with mobile characteristics. Example: A touchscreen. To accommodate those users, configure an authentication selector that provides an alternate flow so they can sign in.
  • You must have security administrator privileges.
  • You must set up your tenant for SP-initiated SAML.
  • Security:
    Set Up: Tenant Setup - Security
     domain in the System functional area.
  1. Access the
    Edit Tenant Setup - Security
     task.
  2. In the
    Redirection URLs
     grid in the
    Single Sign-on
     section, select
    Authentication Selector
     for the
    Redirect Type
    .
  3. In the
    Authentication Selector
     field, select
    Create Authentication Selector
    , and name the authentication selector
    Multiple Auth Paths
    .
  4. Add a row in the
    Redirection URLs
     grid for OfficeConnect users:
    Option Description
    Name
    OfficeConnect Sign-In
    Login Redirect URL
    https://myworkday.com/gms/login-saml2.htmld
    Mobile Browser Login Redirect URL
    https://myworkday.com/gms/login-saml2.htmld
  5. Add another row for all other users:
    Option Description
    Name
    GMS Sign-In
    Login Redirect URL
    https://myworkday.com/gms/login-saml2.htmld
    Mobile Browser Login Redirect URL
    https://www.gms.com
  6. Click
    OK
    .
  7. Click
    OK
     and
    Done
    .
When users enter the GMS company URL into a browser, a sign-in page with 2 options displays:
  • GMS Sign-In
  • OfficeConnect Sign-In
If the user accesses the sign-in page from a standard computer, both the
GMS Sign-In
 and
OfficeConnect Sign-In
 options redirect them to the IdP for sign-in. If the user accesses the sign-in page from a computer with mobile characteristics:
  • The
    GMS Sign-In
     option redirects them to the GMS home page.
  • The
    OfficeConnect Sign-In
     option redirects them to the IdP for sign-in.