Toggle between accounts
Techniques are described for enabling administrators of teams that use a particular service to specify which sign-on options, of multiple possible sign-on options, are assigned to the members of the teams to which the administrators belong. For example, an administrator may assign a sign-on option, which allows members of the team to use either native authentication or third-party single-sign-on authentication. Upon successful authentication of a member using third party single sign-on authentication, the member is automatically assigned to use only the third party single sign-on authentication.
1. A computer-implemented method comprising:
providing, by a service, a first mechanism by which users of the service may sign on to the service using native authentication of the service;
providing, by the service, a second mechanism by which users of the service may sign on to the service using a third-party single-sign-on provider;
enabling an administrator of each team of a plurality of teams to access and use a tool to specify which sign-on options, of a plurality of sign-on options made available by the service, are assigned to members of the team to which the administrator belongs;
wherein the plurality of sign-on options include at least:
a first sign-on option in which either the first mechanism or the second mechanism may be used, and
a second sign-on option in which only the second mechanism may be used;
wherein the plurality of teams includes a particular team with a particular member;
upon successful authentication of the particular member using the second mechanism, automatically assigning the second sign-on option to the particular member.
2. The method of claim 1 , further comprising:
receiving a request for the service from the particular member;
determining a particular sign-on option, of the plurality of sign-on options, assigned to the particular member; and
providing the service based, at least in part, on the successful authentication of the particular member.
3. The method of claim 2 , wherein:
the particular sign-on option is the first sign-on option;
the method further comprises receiving a specification from the particular member which of the first mechanism or the second mechanism to use to sign on to the service; and
the particular member signs on to the service using the specified mechanism.
4. The method of claim 2 , wherein:
the particular sign-on option is the second sign-on option;
the particular member signs on to the service using the third-party single-sign-on provider.
5. The method of claim 2 , wherein:
the plurality of sign-on options further include a third sign-on option in which only the first mechanism may be used;
the particular sign-on option is the third sign-on option; and
the method further comprises receiving a user-id or a password of the particular member.
6. The method of claim 1 , further comprising:
upon unsuccessful authentication of the particular member using the second mechanism, asking the particular member to provide a user-id or a password.
7. The method of claim 1 , wherein the successful authentication of the particular member using the second mechanism is based on a user-id, of the particular member, that is not received in a request for service from the particular member.
8. The method of claim 1 , wherein a particular administrator of the particular team of the plurality of teams uses the tool to specify that the first sign-on option is assigned to the particular member of the particular team; and wherein the method further comprises:
while the first sign-on option is assigned to the particular member, determining whether the particular member unsuccessfully attempted to use the second mechanism to sign on to the service.
9. The method of claim 1 , wherein the tool provides an interface that includes one or more of:
a control for receiving, from a particular administrator of the particular team, data that indicates an address of the third-party single-sign-on provider;
a control for receiving, from the administrator, data required to authenticate a member of the particular team at the third-party single-sign-on provider; or
a control to initiate a test of the second mechanism.
10. The method of claim 1 , wherein the tool provides an interface that comprises a control to initiate a test of the second mechanism and an element for indicating whether the test was successful.
11. A computing system comprising:
one or more processors;
one or more programs configured for execution by the one or more processors, the one or more programs comprising instructions configured for:
providing, by a service, a first mechanism by which users of the service may sign on to the service using native authentication of the service;
providing, by the service, a second mechanism by which users of the service may sign on to the service using a third-party single-sign-on provider;
enabling an administrator of each team of a plurality of teams to access and use a tool to specify which sign-on options, of a plurality of sign-on options made available by the service, are assigned to members of the team to which the administrator belongs;
wherein the plurality of sign-on options include at least:
a first sign-on option in which either the first mechanism or the second mechanism may be used, and
a second sign-on option in which only the second mechanism may be used;
wherein the plurality of teams includes a particular team with a particular member;
upon successful authentication of the particular member using the second mechanism, automatically assigning the second sign-on option to the particular member.
12. The system of claim 11 , wherein the instructions are further configured for:
receiving a request for the service from the particular member;
determining a particular sign-on option, of the plurality of sign-on options, assigned to the particular member; and
providing the service based, at least in part, on the successful authentication of the particular member.
13. The system of claim 11 , wherein the instructions are further configured for:
upon unsuccessful authentication of the particular member using the second mechanism, asking the particular member to provide a user-id or a password.
14. The system of claim 11 , wherein the successful authentication of the particular member using the second mechanism is based on a user-id, of the particular member, that is not received in a request for service from the particular member.
15. The system of claim 11 , wherein the tool provides an interface that includes one or more of:
a control for receiving, from a particular administrator of the particular team, data that indicates an address of the third-party single-sign-on provider;
a control for receiving, from the administrator, data required to authenticate a member of the particular team at the third-party single-sign-on provider; or
a control to initiate a test of the second mechanism.
16. One or more non-transitory computer-readable storage media storing instructions, which when executed by one or more processors, cause:
providing, by a service, a first mechanism by which users of the service may sign on to the service using native authentication of the service;
providing, by the service, a second mechanism by which users of the service may sign on to the service using a third-party single-sign-on provider;
enabling an administrator of each team of a plurality of teams to access and use a tool to specify which sign-on options, of a plurality of sign-on options made available by the service, are assigned to members of the team to which the administrator belongs;
wherein the plurality of sign-on options include at least:
a first sign-on option in which either the first mechanism or the second mechanism may be used, and
a second sign-on option in which only the second mechanism may be used;
wherein the plurality of teams includes a particular team with a particular member;
upon successful authentication of the particular member using the second mechanism, automatically assigning the second sign-on option to the particular member.
17. The one or more storage media of claim 16 , wherein the instructions include instructions, which when executed by the one or more processors, further cause:
receiving a request for the service from the particular member;
determining a particular sign-on option, of the plurality of sign-on options, assigned to the particular member; and
providing the service based, at least in part, on the successful authentication of the particular member.
18. The one or more storage media of claim 16 , wherein the instructions include instructions, which when executed by the one or more processors, further cause:
upon unsuccessful authentication of the particular member using the second mechanism, asking the particular member to provide a user-id or a password.
19. The one or more storage media of claim 16 , wherein the successful authentication of the particular member using the second mechanism is based on a user-id, of the particular member, that is not received in a request for service from the particular member.
20. The one or more storage media of claim 16 , wherein the tool provides an interface that includes one or more of:
a control for receiving, from a particular administrator of the particular team, data that indicates an address of the third-party single-sign-on provider;
a control for receiving, from the administrator, data required to authenticate a member of the particular team at the third-party single-sign-on provider; or
a control to initiate a test of the second mechanism.