1. Knowledge Base
  2. SurePassID Authentication Server

How do I enable sign in with the SSO Identity field in my SPAS (MFA) system

Our SPAS allows the use of the SSO Identity field for sign ons. Here is how to enable it in the SPAS

There are times when you may want to allow the use of an alternate identity for signing into Windows with our WLM and our on presmises installation of SPAS.

An example of this would be when the user is signing into Windows with their e-mail address instead of the samAccountName and they are different. You could enable the use of the SSOIdentity field in the SPAS to enter the user's e-mail address as a valid login.

To enable this in the SPAS web.config, add this key or change it to "TRUE" if it is already in the web.config:

In app settings, add this key:  <add key="Server.AllowLoginSSoName" value="True" />

The above enables the SPAS code to use the SSOIdentity field for finding and validating the user.