Role mapping is essential for ensuring that users have the correct permissions and access levels based on their roles within your organization's property management system. By leveraging SSO, you can streamline user authentication and authorization, improve security, and enhance the user experience.
|
■ To access Role Mapping in SSO... Navigate to the Users tab in the AI Portal's left sidebar. You can also find it via search: press Cmd+K (Mac) / Ctrl+K (Windows), or click Search at the top of the sidebar. If you do not see this option, contact your org admin to review your user role and permissions. |
Permissions
The following permissions are required to set up role mapping.
| Permission Name | View |
Add |
Edit |
Delete |
| Admin > SSO Settings | ✓ |
✓ |
✓ |
✓ |
| Admin > SSO User Role Mapping | ✓ |
✓ |
✓ |
✓ |
Update permissions in your AI Portal's Users > Manage Users page. See the Set Up and Invite Users article for instructions.
Role Mapping Setup
Follow these steps to set up role mapping effectively, allowing your team to access the right resources with ease and confidence.
On the Manage Users - SSO page, click the JIT (Mapping) tab at the top of the page.
Select an option in the PMS Community Mapping Strategy dropdown at the top of the page. This determines how our system matches users that sign in with SSO to their profiles in your external PMS.
- Always: Always use PMS community assignments in addition to your AI Portal's role mapping setup.
- Fallback: Fall back to PMS community assignments if no information is found in your AI portal's role mapping setup.
- Never: Never use PMS community assignments.
Fill in roll mapping info. The numbers in the screenshot above correspond to each step in the instructions below:
-
Align User Field Name
Fill in the user field box to match the field that corresponds with the user’s role in your PMS directory
-
Example: If the field in your directory is “job_title,” use “job_title” as the user field name
Please note that this field is case sensitive
-
Input Role Titles
Enter the actual role titles in the “Your Title values” section
Example: For a user with the title "Community Manager," input “Community Manager” in the values section
-
You can add multiple roles in “Your Title values” if they share the same permissions and use a comma to separate them
Please note that this field is case sensitive
-
Assign EliseAI Roles
In the “EliseAI Roles” drop down, assign the corresponding role with the appropriate permissions that match the role titles you entered into “Your Title values.”
This ensures that each user’s role in your directory aligns with their permissions in EliseAI
You can choose from your organization's custom roles. See Set Up and Invite Users in AI Portal for instructions on creating custom roles.
-
Add Additional Roles
To add more roles and their associated permissions, click “Add mapping” in the bottom right to add additional job titles
Continue to add specific role titles and their corresponding EliseAI role to map your users accurately
By following these steps, you can ensure that your users are mapped correctly to their roles, allowing them seamless access to the appropriate resources and permissions within EliseAI.
Login Log
Click the Login Log tab at the top of the page to view a log of recent SSO logins.
The page lists the following for past SSO logins:
- User's Email
- Login Timestamp
- User's Name
- SSO Mapped Roles
- SSO Mapped Communities
Use this page to assess role/community mapping and troubleshoot any issues.