Guest role setup via SAML

New

I have setup SSO and SAML successfully. Created 4 app roles and assigned them to 4 AD groups for easier user management.

Except the guest role, all the other roles are getting setup correctly. When adding user to the role standard or admin or architect - the correct roles gets applied on their first login.

  1. When adding a guest account to the AD group link to guest role, it creates a standard role account in Fullstory and cannot modify the role within the app with admin account also.
  2. When moving a user from one role to in Azure, it does not update the user’s role in Fullstory app.

Please advice.

0

Comments

3 comments

  • Hey @Ram_2d! Thanks for reaching out! 😊

    To answer your first question, our team took a peek at your account and it looks like you may still need to add email domains to the allowlist. If you take a look here under, “Enabling guests for your account”, this is listed as step #4. I would recommend adding a domain to the list, and then trying again to create a guest user. Please let us know if you’re still having trouble!

    For your second question, this would require our support team to take a deeper look into how the role didn’t change after an update as expected. Our team will be creating a ticket for you and should be reaching out shortly for more information + screenshots! 

    Please let us know if you have any other questions! 

    0
  • Hey Lindsay

    Thank you for getting back to me. I tried the below steps

    1. Guest sharing toggle is on
    2. Added gmail.com to “Shared Domain” list
    3. Invited my gmail account as guest user in Azure and added it to the Fullstory Guest AD group.
    4. When signing in via SSO option from gmail account, it is still creating role as Standard.

     

    0
  • Hey @Ram_2d! Thanks for following up and sharing those screenshots! 

    I’m sorry to hear that step didn’t quite work. I passed this along to our support team and included it in the ticket so they can continue the conversation with you there. 

    Please don’t hesitate to reach out should you have any other questions!

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post