Gateway is the central portal for accessing all Sign In Solutions products your organization has access to. Whether you're signing in via Single Sign-On (SSO) or using an email and password, the same credentials will grant you access across your product suite. This article will guide you through setting up your SSO integration, managing users, and assigning product-specific permissions.
SSO Provisioning – IDPs and Domains
For the best enterprise experience, we recommend provisioning users through SSO. In the section below, we will be doing so through the Identity Providers and Domains sections in Gateway:
Click Manage in the top right corner of your account.
Select Identity Providers
3. Click Add Identity Provider > SAML. Add any provider name.
4. Enter the details required and requested from your SAML provider, following the instructions provided on the page. If you are familiar with the standard Visitor Management SAML setup, most of the steps will be the same.
Role: This controls the access that the user will be automatically provisioned with in Gateway. We recommend that you leave this as the BASIC role, as Admin access within Gateway should be tightly controlled. Leave this field blank to automatically provision users with the BASIC role.
Products: This controls what products a user will have access to in Gateway. This should match the App Identifier name given for each of their products. (To find the App Identifier, click settings within a product's tile. It is then listed near the top of the page.) To add multiple App Identifiers, separate them with commas.
You can also use a group attribute, with the App Identifier being the group name. When this attribute is mapped, if present in the SAML response, users will only be assigned to the provided products, un-assigning any that is not present on the list. If the attribute is not present in the SAML response, the user will be unassigned from all products.
Domains
You must also associate a Domain to the SAML configuration:
Click Manage > Domains
2. Click Add domain, then enter your Domain name
3. Follow the steps to grab the TXT record and validate it on the registrar's website.
4. Once validated, head back into the Identity Providers section and select the IdP you had set up earlier.
5. Click the checkbox under Associated domains for your now verified domain. Click Save to complete the process.
Important Notes about Adding Users
When a Gateway admin grants a brand new user access to products through Gateway, that user will receive a pre-defined access level for each product:
Visitor Management: Users will be assigned the default permission bundle configured on the Preferences page.
Compliance: Users will receive the Employee role.
To upgrade a user's role in a product, an admin of that specific product must make the change within that product’s admin portal — not in Gateway.
If the Gateway user already has an existing user within their respective products, they will automatically be synced with their existing permissions.
Adding Users Without SSO
Gateway admins can also add users manually through the portal. However, there is currently no bulk process, like a CSV upload. Because of this, we do not recommend that admins use this method. Rather, they should set up provisioning through SSO.
If an admin would still like to add a user individually:
1. Click Manage > Users
2. Click Add User. Enter the user's credentials and select the ADMIN or BASIC role.
3. To assign the user a product, click the Products tab and toggle on the products you wish to assign.
Security Tab
The Security tab controls basic password requirements and MFA settings. To access it, click Manage > Security.
You can set a minimum password length and set MFA as On, Off, or Optional.
