SSO (Single Sign-On) is a method of authentication that allows organisations to manage their employee’s access to the software the organisation, uses from a centralised location.

To utilise SSO with RapidSpike you must connect both your Identify and Directory Providers to us. This is achieved via a third-party application called WorkOS which makes the connection process and ongoing maintenance easier to manage. It also enables us to provide support to the most common Identity Providers (IDPs) and Directory Providers.

Connecting these two providers to your RapidSpike account is simple:

• Contact RapidSpike support or your Account Manager and they’ll be able to get you started
• We’ll give you two links that take you through the setup to connect your providers to WorkOS, and subsequently RapidSpike
• Once connected, RapidSpike will attempt to synchronise all existing users in your RapidSpike account with your Directory Provider
• Users that do exist in the provider will then no longer be able to manage their profile in RapidSpike and will authenticate via the IDP
• Users that don’t exist in the provider will still be able to manage their profile in RapidSpike and authenticate via email and password

User Access Controls

Users in RapidSpike accounts are one of three ACLs: ‘Admin’, ‘User’ and ‘View Only’. Each account also has one ‘Admin’ user marked as the account ‘Owner’ – their access level is still classed as ‘Admin’.

Admin

✅ Admin-only dashboards: Alert History, Attack Detection.
✅ Admin-only settings: Plan, Credits, Billing, User Groups and more.
✅ Can add, edit or delete monitors, websites, servers and scans.
❌ Cannot belong to User Groups.

User

❌ Cannot access Admin-only dashboards or settings.
❌ Cannot add, edit or delete other users.
✅ Can add, edit or delete monitors, websites, servers and scans.
✅ Can belong to User Groups.

View Only

❌ Cannot access Admin-only dashboards or settings.
❌ Cannot access Users, Reports or Custom Wallboards.
❌ Cannot add, edit or delete any monitors, websites, servers or scans.
✅ Can belong to User Groups.

These RapidSpike ACLs need to be mapped in the SSO directory provider to your organisation’s corresponding ACLs. During the setup process, you’ll be asked for a ‘Directory Provider Value’ rapidspikeAccess which needs also needs to be rapidspikeAccess. This may require more configuring depending on your Directory Provider. For example, if you’re setting up using Google you will need to create a new User Custom Attribute called rapidspikeAccess inside a category called rapidspike.

The key mapping is:

• admin ➡ Admin privileges
• user ➡ User privileges
• restrictedUser ➡ View Only privilege

Please do not hesitate to reach out to our support team if you require any help or additional information during this process.