cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Want to learn some quick and useful tips to make your day easier? Check out how Calvin uses Replay to get feedback from other teams at Dropbox here.

Plans and Subscriptions

Ask the Dropbox Community for help if you have questions about your Dropbox plan or subscription. Find solutions and share advice with members.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Will users on the same domain be affected after setting up SSO?

Will users on the same domain be affected after setting up SSO?

GoGoGriffster
Explorer | Level 4
Go to solution

One of our teams has a Dropbox Business account and we want to move them to use SSO via Okta.

 

After setting up SAML SSO for this account, will this affect any other users from the same domain?  What happens when users on this account go to Dropbox.com to sign in?  Do they just get redirected to the SSO portal?

 

thanks in advance

Greg

1 Accepted Solution

Accepted Solutions

Walter
Dropbox Staff
Go to solution
Ah, I see now. Thanks for the clarification @GoGoGriffster

They won't get affected unless the team admin has also enabled domain verification and invite enforcement

Walter
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join

View solution in original post

6 Replies 6

Walter
Dropbox Staff
Go to solution
Hey @GoGoGriffster, thanks for using Dropbox and posting on our Community!

This would depend on the way the team's admin has set it up, Greg. 

If the team's admin has made SSO optional, members of the team will be able to use either sign-in method. They can sign in to the team's page with their SSO password for work, or, they can click Log in with Dropbox credentials to sign in with their Dropbox password.

I hope this helps!
 

Walter
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join

GoGoGriffster
Explorer | Level 4
Go to solution
Thanks. I read about that.

My question is though if other domain users that are not assigned in this Dropbox business account will be affected.

Walter
Dropbox Staff
Go to solution
Ah, I see now. Thanks for the clarification @GoGoGriffster

They won't get affected unless the team admin has also enabled domain verification and invite enforcement

Walter
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join

GoGoGriffster
Explorer | Level 4
Go to solution

One more question....

I've set up SSO as optional, is it possible to force all @uts.edu.au users in this dropbox account to use SSO and other external addresses to use Dropbox login?

 

If I set SSO to required, does that mean I will have to have external users in Okta?

 

I'm thinking I don't want to enable Domain verification as it will affect anyone that has a personal account using their @uts.edu.au email address?

 

Walter
Dropbox Staff
Go to solution
I don't believe this would be an option with SSO set as optional @GoGoGriffster - you'd also need to notify the team yourself this way. 

When it comes to your question about Okta, could you elaborate a tad please? By external users, do you mean people on the same domain but not already in the team account?

In regards to your last concern, I believe you're referring to the invite enforcement feature, which can be enabled after domain verification has been completed.

This will require all invited users with a personal Dropbox account created using an email on the verified domain to select from one of two options:
  • Join the team with their existing account.
  • If their account has mostly personal content, they can change the email address associated with this account to a new personal email address. This will keep their existing content separate from the business account.
I'm not sure if this would help in this case, but, perhaps, domain insights and account capture is what you're looking for?

Walter
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join

GoGoGriffster
Explorer | Level 4
Go to solution

Firstly, @Walter thanks for that last bit of information, that will be immensely helpful I believe.

 

I think we’re just going to stick with optional SSO as it seems by design, if a user has SSO enabled, the login dialog changes to SSO by default.

 

By external users I meant those not in primary domains in Okta (@uts.edu.au, @student.uts.edu.au).  Setting invite enforcement might cause issues with these external accounts and api connections etc that are currently in place.

Need more support?
Who's talking

Top contributors to this post

  • User avatar
    GoGoGriffster Explorer | Level 4
  • User avatar
    Walter Dropbox Staff
What do Dropbox user levels mean?