Sticky

Important Update: Migration of our CC customers to Gainsight SSO

  • 5 March 2024
  • 8 replies
  • 429 views

Userlevel 2

We heard you, and it is finally here! We’re thrilled to share that we will soon be starting our migration and implementation of Single Sign-On (SSO) for Gainsight Customer Communities!

In March 2024 we will start migrating all of our CC customers to the Gainsight Platform Single Sign-On (SSO) or SAML authentication (depending on your situation). By the end of April all of our CC customers will have been migrated.

Why is this important?

This is a significant upgrade to our authentication system that makes it easier and more secure for our customers to log in to Gainsight Customer Communities.

Following the migration, Administrators, Community Managers, and Moderators will utilize Gainsight Platform SSO to access both the front-end and the control environment of their community, and can seamlessly switch between Gainsight products.  And with the option of configuring SAML authentication it will also be possible to set up identity and access management for employees through platforms such as OKTA.

What does this mean for you?

The way Gainsight Platform SSO will function for you will depend on which Gainsight products you are using.  

  • If you are only using CC your employees will log in via Gainsight Platform SSO using their existing credentials.  With the addition of SAML support, you will have the option of additional security and convenience with the setup of an identity management platform (such as OKTA).
     
  • If you are using CS and CC (potentially in combination with CE and/or PX) your employees will log in using their Gainsight CS credentials.  They will be able to seamlessly switch between CS and CC.
     
  • If you are using CC in combination with CE and/or PX your employees will log in using their CC credentials, and will be able to seamlessly switch between products.
     
  • If you choose to set up SAML SSO the configuration will apply for all Gainsight products that have been migrated to Gainsight SSO.

If any employees encounter problems logging in after the migration, you can use the Reset Password option to reset the password.

What to expect after the migration

Once your community has been migrated onto the Gainsight Platform SSO, you’ll notice a change in the login flow.

Here's what to expect during the login process:

  • When logging in to the control environment, you will be redirected to the Gainsight login page for authentication using your credentials (see above to determine the credentials for your situation). Note: You must use your email address (not username) to log in. 
     
  • When logging in to the front end of your community, after entering your credentials, one of the following will occur:
    • If your email is registered in Platform SSO you will be redirected to the SSO login page where you will be asked to provide your password again. 
    • If your email is not registered in Platform SSO you will be logged in as a non-SSO user.
    • If you have SAML set up on your front-end community, the login flow won't change.

Additionally, we have automated the reset password workflow. A Reset Password button will be integrated into the user profile page in the control environment. Simply select the button to trigger an email containing reset password instructions.  With SSO, users have one set of credentials, meaning that changing one password will change it across all Gainsight products.

Timeline and Support

The migration to the Gainsight Platform SSO is scheduled between March 11th and the end of April. If you have any questions, you can ask them right here in our community and our support team is also here to help (ccsupport@gainsight.com). 

 


8 replies

Userlevel 6
Badge +5

Will this migration have any impact on end-user SSO setups for existing communities? 

Userlevel 5
Badge +4

Hey @DannyPancratz there should be no impact on end-user SSO setups.  

Userlevel 6
Badge +5

🎉

Userlevel 2

Hello!

 

One of my colleagues received an email on this topic from the The Gainsight Product Team which looks slightly different than the above information.


Our private community already uses SSO for reg. users (SSO method SAML 2 is enabled).

Do we understand correctly that

  • nothing will change for our registered users then.
  • for users who login to Control the login page changes and username is not possible as credential, only email.

Please kindly confirm. Thanks!

Userlevel 2

Hi @Eva 

Yes, you are right. If you decide to use Gainsight SSO for Control users, only email will be accepted. After migration, you will also be able to set up any SAML and use it to authenticate your Control users.

Userlevel 2

Hello again,

I just changed a user’s role to moderator in my productive company.
It’s a normal registered user, created for testing purposes esp. with changed roles. Always worked as intended.

This moderator user needs to log in to Control, so needs a password. I realized that I cannot set the password anymore in Control for “Team” users, so I clicked Reset Password in user’s profile. 

User hasn’t received an e-mail. Checked the spam folder.
Then, user clicked the Forgot password link in the Gainsight login page. So far, nothing happened.

How long does it usually take to receive the Reset password mail? What could be the problem here? Is there anything I’m missing?

Thanks!

Userlevel 2

….and if I remove the moderator role from this user and later assign them a different “Team” role (such as admin, moderator, community manager...), will their password remain the same? Or will the user need a new password each time they are given a “Team” role again?

Userlevel 2

hi @Eva 

I'm sorry to hear that you have a problem. You should have received the reset password email immediately. May I kindly ask you to raise a support ticket

Reply