New Login Experience
We’re giving the login experience a fresh new look that’s cleaner, brighter and easier to use. This update will be rolled out to production starting on Nov 9th, 2020 and will be completed by November 11th, 2020. No actions are required to receive this update.
New brand styling
To align with our recent interface upgrade, we have updated the branding for both branded and non-branded login experiences.
Microsoft Integrated SSO
Today, we allow users to sign into the Poofpoint Essentials portal with either an Proofpoint username and password or by manually selecting Microsoft to authenticate their account credentials.
In our new login experience, organizations can choose to force their users to authenticate with only their Microsoft credentials, creating a seamless Single Sign On experience. Users will be prompted to enter their Microsoft credentials immediately after entering their email address.
Prerequisites
In order to force users to authenticate with Microsoft, the following conditions need to be true:
- The user must have an active user account in Proofpoint Essentials
- The organization must be using and have synced users to Microsoft
- The organization must have a valid Azure connection in Proofpoint Essentials
- The following setting must be enabled (will be available after the release)
How to Enable Microsoft Integrated SSO
- Go to your Proofpoint Essentials login page.
- Enter your Username (email address) and click Login.
- Enter Password and click Login.
- Navigate to Administration > User Management > Import & Sync > Azure Active Directory
- Enable Allow users to authenticate with Microsoft
- Click save
Enabling this feature will direct all users (including administrators) to login using their Microsoft account.
Logging In With Microsoft Account
We will continue to allow users to manually authenticate using their Microsoft account.
PROCEDURE
- Go to your Proofpoint Essentials account login page.
- Enter your Username (email address) and click Login.
- Click Sign in with Microsoft.
- You will be redirect to a Microsoft account login page.
- Enter your Microsoft credentials.
- If successful, login will redirect you back to Proofpoint Essentials and you will be automatically signed into your account.
FAQ
1. If customers are already using the Office 365 Account button (on our existing page), will it continue to work? Yes, however we have changed the location. Customers will need to enter their email address, click login and then Sign in with Microsoft.
2. Do these changes affect API authentication? No. API auth is still through the PFPT auth (configured username/password).
3. Is there an impact to current or white-label URLs? No.
4. Are there any changes to stack redirects (If a user logs into a different stack URL then they’re account is located)? No.
5. What happens if Microsoft identity platform is down? If the Microsoft identity platform is unavailable, users will be redirect to the Proofpoint Essentials account login page and asked to login using their Proofpoint Essentials credentials.
6. What happens if there is a problem with Microsoft identity platform and I have enabled Allow users to authenticate with Microsoft? If there is a problem with Microsoft IDP, a custom parameter can be passed to utilize standard essentials authorization.
US Interface
Email Address = john.jones@test.com
https://us1.proofpointessentials.com...?main=1&email=EMAIL_ADDRESS
Example: https://us1.proofpointessentials.com/app/login.php?main=1&email=John.Jones@test.com
EU Interface
Email Address = john.jones@test.com
https://eu1.proofpointessentials.com...?main=1&email=EMAIL_ADDRESS
Example: https://eu1.proofpointessentials.com/app/login.php?main=1&email=John.Jones@test.com
Carlos Rios
Comments