diff --git a/en/asgardeo/docs/assets/img/guides/organization/organization-login/discovery-page-org-name.png b/en/asgardeo/docs/assets/img/guides/organization/organization-login/discovery-page-org-name.png new file mode 100644 index 0000000000..7d953cf7ed Binary files /dev/null and b/en/asgardeo/docs/assets/img/guides/organization/organization-login/discovery-page-org-name.png differ diff --git a/en/asgardeo/docs/assets/img/guides/organization/organization-login/enhanced-org-authentication.png b/en/asgardeo/docs/assets/img/guides/organization/organization-login/enhanced-org-authentication.png new file mode 100644 index 0000000000..681b7c8b59 Binary files /dev/null and b/en/asgardeo/docs/assets/img/guides/organization/organization-login/enhanced-org-authentication.png differ diff --git a/en/asgardeo/docs/assets/img/guides/organization/organization-login/sso-option.png b/en/asgardeo/docs/assets/img/guides/organization/organization-login/sso-option.png new file mode 100644 index 0000000000..a0947ba1e6 Binary files /dev/null and b/en/asgardeo/docs/assets/img/guides/organization/organization-login/sso-option.png differ diff --git a/en/asgardeo/docs/guides/organization-management/organization-discovery/organization-discovery.md b/en/asgardeo/docs/guides/organization-management/organization-discovery/organization-discovery.md index d59d073c3f..f41714424c 100644 --- a/en/asgardeo/docs/guides/organization-management/organization-discovery/organization-discovery.md +++ b/en/asgardeo/docs/guides/organization-management/organization-discovery/organization-discovery.md @@ -1,4 +1,4 @@ {% set host_name = "api.asgardeo.io" %} {% set organization_path_param = "/t/" %} -{% include "../../../../../includes/guides/organization-management/organization-discovery/index.md" %} +{% include "../../../../../includes/guides/organization-management/organization-discovery/organization-discovery-enhanced-flow.md" %} diff --git a/en/asgardeo/docs/guides/organization-management/organization-login/legacy-approach.md b/en/asgardeo/docs/guides/organization-management/organization-login/legacy-approach.md new file mode 100644 index 0000000000..cddae9bc2c --- /dev/null +++ b/en/asgardeo/docs/guides/organization-management/organization-login/legacy-approach.md @@ -0,0 +1,4 @@ +{% set host_name = "api.asgardeo.io" %} +{% set organization_path_param = "" %} + +{% include "../../../../../includes/guides/organization-management/organization-login/legacy-approach.md" %} diff --git a/en/asgardeo/docs/guides/organization-management/organization-login/migrate-to-enhanced-approach.md b/en/asgardeo/docs/guides/organization-management/organization-login/migrate-to-enhanced-approach.md new file mode 100644 index 0000000000..06da80b71b --- /dev/null +++ b/en/asgardeo/docs/guides/organization-management/organization-login/migrate-to-enhanced-approach.md @@ -0,0 +1,4 @@ +{% set host_name = "api.asgardeo.io" %} +{% set organization_path_param = "" %} + +{% include "../../../../../includes/guides/organization-management/organization-login/migrate-organization-login.md" %} diff --git a/en/asgardeo/docs/guides/organization-management/organization-login/organization-login-overview.md b/en/asgardeo/docs/guides/organization-management/organization-login/organization-login-overview.md new file mode 100644 index 0000000000..f77aa360c8 --- /dev/null +++ b/en/asgardeo/docs/guides/organization-management/organization-login/organization-login-overview.md @@ -0,0 +1,4 @@ +{% set host_name = "api.asgardeo.io" %} +{% set organization_path_param = "" %} + +{% include "../../../../../includes/guides/organization-management/organization-login/organization-login-overview.md" %} diff --git a/en/asgardeo/docs/guides/organization-management/organization-login/organization-login-with-app-native-authentication.md b/en/asgardeo/docs/guides/organization-management/organization-login/organization-login-with-app-native-authentication.md new file mode 100644 index 0000000000..da67abf7e6 --- /dev/null +++ b/en/asgardeo/docs/guides/organization-management/organization-login/organization-login-with-app-native-authentication.md @@ -0,0 +1,4 @@ +{% set host_name = "api.asgardeo.io" %} +{% set organization_path_param = "" %} + +{% include "../../../../../includes/guides/organization-management/organization-login/organization-login-with-app-native-authentication.md" %} diff --git a/en/asgardeo/mkdocs.yml b/en/asgardeo/mkdocs.yml index 30986003e8..d55858563f 100644 --- a/en/asgardeo/mkdocs.yml +++ b/en/asgardeo/mkdocs.yml @@ -546,6 +546,15 @@ nav: - OIDC scopes: guides/organization-management/inheritance-in-organizations/oidc-scope-inheritance.md - Flows: guides/organization-management/inheritance-in-organizations/flow-inheritance.md - Extend with service extensions: guides/organization-management/service-extensions/service-extensions.md + - Organization-based login: + - Overview: guides/organization-management/organization-login/organization-login-overview.md + - Organization discovery: + - Discover organizations during login: guides/organization-management/organization-discovery/organization-discovery.md + - Email domain-based organization discovery: guides/organization-management/organization-discovery/email-domain-based-organization-discovery.md + - Organization login with app-native authentication: guides/organization-management/organization-login/organization-login-with-app-native-authentication.md + - Legacy approach: + - Overview: guides/organization-management/organization-login/legacy-approach.md + - Migrate applications to enhanced approach: guides/organization-management/organization-login/migrate-to-enhanced-approach.md - Offboard organizations: - Disable or delete an organization: guides/organization-management/disable-delete-organizations.md - Try a B2B use case: guides/organization-management/try-a-b2b-use-case.md diff --git a/en/includes/guides/organization-management/organization-discovery/organization-discovery-enhanced-flow.md b/en/includes/guides/organization-management/organization-discovery/organization-discovery-enhanced-flow.md index bf7fee7fd9..3f22ffc27b 100644 --- a/en/includes/guides/organization-management/organization-discovery/organization-discovery-enhanced-flow.md +++ b/en/includes/guides/organization-management/organization-discovery/organization-discovery-enhanced-flow.md @@ -13,15 +13,30 @@ This guide explains the organization discovery flow, the available discovery typ After the user clicks **Sign in with SSO**, they are redirected to the organization discovery page where they identify their organization. +{% if product_name == "Asgardeo" %} +By default, users are prompted to enter the **organization name**. + +![Organization discovery page - org name]({{base_path}}/assets/img/guides/organization/organization-login/discovery-page-org-name.png){: width="400" style="display: block; margin: 0; border: 0.3px solid lightgrey;"} + +{% else %} By default, users are prompted to enter the **organization handle** — a human-readable, unique identifier for the organization. ![Organization discovery page - org handle]({{base_path}}/assets/img/guides/organization/organization-login/discovery-page-org-handle.png){: width="400" style="display: block; margin: 0; border: 0.3px solid lightgrey;"} +{% endif %} ### Available discovery types {{ product_name }} supports the following discovery types: -{% if product_name == "WSO2 Identity Server" and is_version > "7.1.0" %} +{% if product_name == "Asgardeo" %} + +| Discovery Type | Use Case | +|-----------------------------------|-----------------------------------------------------------| +| **Organization Name-Based** | Route users using the organization name. | +| **Organization ID-Based** | Route users using the organization ID. Suitable for server-side integrations. | +| **Email Domain-Based** | Automatically identify organizations from email domains. Ideal for corporate email addresses. | + +{% elif product_name == "WSO2 Identity Server" and is_version > "7.1.0" %} | Discovery Type | Use Case | |-----------------------------------|-----------------------------------------------------------| @@ -35,6 +50,8 @@ By default, users are prompted to enter the **organization handle** — a human- --- +{% if product_name == "WSO2 Identity Server" %} + ## Configure default parameter for organization discovery You can set the default discovery parameter for organization discovery across your server or for your root organization. This configuration determines which parameter users provide during SSO login. It affects the user experience. @@ -98,12 +115,15 @@ When you enable email domain discovery, the UI shows the default prompt option a ![Email input for Single Sign-On (SSO) login]({{base_path}}/assets/img/guides/organization/manage-organizations/email-input-for-sso-login.png){: width="400" style="display: block; margin: 0; border: 0.3px solid lightgrey;"} +{% endif %} + --- ## Directly access the organization To route users directly to their organization's login page without showing the discovery page, include an organization discovery parameter in the initial authentication request. {{ product_name }} resolves the organization from the parameter and routes the user to that organization's login page automatically. +{% if product_name != "Asgardeo" %} === "Organization Handle" Add `orgHandle=` to the authentication request. @@ -129,6 +149,7 @@ To route users directly to their organization's login page without showing the d **Example**: For an organization with handle `"abc.com"`, add `orgHandle=abc.com` to the request. +{% endif %} === "Organization Name" Add `org=` to the authentication request. diff --git a/en/includes/guides/organization-management/organization-login/organization-login-overview.md b/en/includes/guides/organization-management/organization-login/organization-login-overview.md index ae14e87ada..8fcc694055 100644 --- a/en/includes/guides/organization-management/organization-login/organization-login-overview.md +++ b/en/includes/guides/organization-management/organization-login/organization-login-overview.md @@ -43,7 +43,11 @@ Send the authentication request to the root organization's endpoint. {{ product_ ``` !!! tip + {% if product_name == "Asgardeo" %} + You can route users directly to their organization by including an organization discovery parameter in the request — such as `org` (organization name), `orgId` (organization ID), or an email domain hint. See [Organization discovery]({{base_path}}/guides/organization-management/organization-discovery/organization-discovery/). + {% else %} You can route users directly to their organization by including an organization discovery parameter in the request — such as `orgHandle`, `org` (organization name), `orgId` (organization ID), or an email domain hint. See [Organization discovery]({{base_path}}/guides/organization-management/organization-discovery/organization-discovery/). + {% endif %} ### Method 2: Start from the direct organization path