Security: Single Sign On (Employee Analytics)

Purpose

Costpoint Analytics provides two basic methods for authenticating users:

 

Use the Prompt Users for Login and Password options under Single Sign On to select the approach you want to use.

This option controls user authentication for Costpoint Analytics – Employee only.

Deltek strongly recommends that you implement single sign on user authentication when you are ready to make Costpoint Analytics generally available to your users. Deltek does not recommend or support making the analytics available without single sign on authentication. If you have a Costpoint Analytics SaaS Subscription and you decide to use security in Costpoint Analytics, you must implement single sign on authentication.

Project Analytics and Summary Analytics

You set this option separately for project analytics in Costpoint Analytics – Project Configuration, and that setting controls user authentication for both Costpoint Analytics – Project and Costpoint Analytics – Summary.

While you could, for example, select Yes for Costpoint Analytics – Employee and No for Costpoint Analytics – Project, Deltek recommends that you keep them the same.

Preparation

These options are only available if you select Yes in Apply Security. For more on that option, see Security (Employee Analytics).

Also, regardless of the authentication method you select, you must set up all users in Costpoint Analytics. For complete information, see Security: Key Concepts and related topics.

Initial Configuration

To use single sign on authentication, select No in Prompt Users for Login and Password options under Single Sign On.

To require all users to enter a user ID and password to gain access to Costpoint Analytics, select Yes in Prompt Users for Login and Password.

You may want to temporarily select Yes in Prompt Users for Login and Password while you are testing security settings. That enables you to log into Costpoint Analytics more quickly using various user ID and password combinations to confirm that they have the correct access. If you instead implement single sign on, you will have to log out of the network and log back on each time you want to test another user ID and password.

If you use non-single sign on initially and later change this option, you are required to enter a user ID and password when you do the data load that updates the data model with the security change. Because the switch to single sign on has not yet occurred, you must use the non-single sign on user ID and password one final time.

Ongoing Administration

Normally, you do not change this setting after the initial configuration. However, you can change it at any time.