Demo: SSO for store staff into the new back office
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
design SSO for store staff, including shared devices and turnover.
Draft outline details
Step by step
- Context: 120 stores, shift workers on shared tills, high turnover, some without corporate email.
- Choose: back office as an OIDC client of the workforce IdP; role claims mapped from directory groups (store manager, cashier, head office).
- Handle shared devices: short sessions, per-user login, MFA suited to store use (badge or app); no shared logins.
- Planned mistake: one shared login per store "for speed". Fix: individual accounts, fast badge-based sign-in, and audit trail per person.
- Automate joiner and leaver from the HR system.
- Define break-glass for IdP outage: how a store keeps operating (links to ARC-019).
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.