Skip to main content

Inviting New Users

Use this guide to invite and onboard users. DataGrail supports two login flows.

If your identity provider (IdP) is...Follow these steps
Okta, Microsoft Entra ID, OneLogin, PingOne, JumpCloud, VMware Workspace OneSAML Flow
Google Workspace, Microsoft 365OIDC Flow

SAML Flow​

Inviting a new user through a SAML identity provider (e.g. Okta) is done by assigning the user (or a group the user belongs to) to the DataGrail application in your IdP.

Persons Needed to Grant Access: IT Person from your organization

  1. Sign in to your SAML IdP admin console and open the DataGrail application (service provider) configuration.
  2. Go to the user or group assignment / access management section.
  3. Assign the user (or an existing group) to the application and apply the change.
  4. Notify the user they can now sign in to DataGrail via your SSO link. New users receive the default role on first login. Learn more about managing roles and permissions here.
Group Provisioning

If your account is configured to use group provisioning, your IT person will need to add you to a mapped group to receive a role in DataGrail.

DataGrail Roles must only be managed through IdP groups for customers using the feature.

OIDC Flow​

Inviting a new user through an OIDC provider (e.g. Google or Microsoft SSO) is done by sending the user an invitation through DataGrail

Persons Needed to Grant Access: IT Person from your organization, DataGrail Super Admin

  1. Log in to DataGrail and navigate to Settings and then User Admin.
  2. Select Invite New User in the top-right corner.
  3. Enter the name and email of the new user and select a role.
  4. The invited user will receive an email with a link to the DataGrail platform. They must use this link to log in.
  5. If the new user does not log in within 72 hours, a new invitation must be created.
Inviting External Users

DataGrail restricts access to only users with email domains (e.g., carol@domain.com) that match the primary domain of your DataGrail account. If you need to add a user with different email domain (e.g. an agency or subdivision), please reach out to support@datagrail.io so we can approve the domain.

 

Need help?
If you have any questions, please reach out to your dedicated Account Manager or contact us at support@datagrail.io.

Disclaimer: The information contained in this message does not constitute as legal advice. We would advise seeking professional counsel before acting on or interpreting any material.