Studio > Security > Overview

SearchStax Studio offers several ways to increase the security of your site search application:

• Change Password – see how to change your Studio password
• Two-Factor Authentication (2FA) – increase security with Two-Factor Authentication
• Single Sign-On (SSO) – learn more about Single Sign-On for Studio
• Single Sign-On with Okta – see how to implement Single Sign-On using Okta

The post Overview appeared first on SearchStax Docs.

Studio > Account Menu > My Profile

There are multiple ways to change a password in SearchStax Studio depending on context.

If you are locked out of your SearchStax account, use the Forgot Password link on the login page.

If you should need to change your own password because it is about to expire, pull down the Accounts menu in the upper-right corner of the Studio and select My Profile. 

On this screen you can modify your screen name (first and last names) and reset your password if desired. One cannot change the email address, since that is the SearchStax user’s unique ID. (Changing the email requires the assistance of the SearchStax Support Desk.)

The post Change Your Password appeared first on SearchStax Docs.

Studio > Account Menu > My Profile

All SearchStax Studio users have the option of enabling Two-Factor Authentication (TFA) using the Google Authenticator. Pull down the Accounts menu in the upper-right corner of the Studio and select My Profile. 

If you scroll down to the lower part of the My Profile screen, the Studio offers you the option of using Two-Factor Authentication.

The setup procedure is simple. Click the Set Up Google Authenticator button to generate the QR code on this screen:

Install the Google Authenticator app on your phone or tablet and use it to scan the QR code. Once the link to SearchStax is verified (which is almost instantaneous), the phone app begins to display six-digit numbers.

When you log into SearchStax, enter your email address and strong password as usual. SearchStax will open a field for your six-digit code. This code changes once each minute, so it is a very secure way to authenticate.

Note that the Studio displays a screen of one-time Backup Verification Codes that you can use if you lose your phone. We recommend that you store these codes in a safe place.

It is possible to disable Two-Factor Authentication from this same Profile screen, should you need to do so.

The post Two-Factor Authentication appeared first on SearchStax Docs.

Studio > Account Menu > My Profile

The SearchStax Studio now offers the ability for clients to set up Single Sign-On (SSO) using the Security Assertion Markup Language (SAML), which is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP).

SSO is an add-on Studio feature that needs to be purchased. If you are interested in this feature, please contact us here. The SSO features of the Studio will not appear until we have authorized the feature in your account.

Pull down the Accounts menu in the upper-right corner of the Studio and select My Profile. 

If you scroll down to the lower part of the My Profile screen, the Studio offers you the option of using Single Sign-On.

Click the button to view a page of SSO setup fields. The procedure for setting up this feature is the same as that on this Managed Solr page.

Login Using SSO

https://searchstudio.searchstax.com/ now provides a button at the bottom for SSO – “Sign-In using your ID Provider.” Click this button.

Enter the domain that was setup for the client.

Click Continue. This takes you to your Azure Sign-in page. After you authenticate, it brings you back to the Studio.

Alternately, you can directly go to https://<Subdomain>.searchstax.com to login, and clicking on the “Sign-In With your ID Provider” will take you directly to Azure Sign In.

SSO + Two-factor Authentication

A User can have SSO and Two-Factor authentication both set up. The 2FA settings for a user will apply to all accounts that the user has access to.

However, for the account that has SSO Setup, while logging in, SearchStax 2FA settings will not apply. In that case, 2FA should be set up at the SSO Provider.

The post Single Sign-On appeared first on SearchStax Docs.

SearchStax Studio now offers the ability for customers to set up Single Sign-On (SSO) to let their users log into SearchStax apps with a single ID and password that works across multiple software systems.

We use the open standard Security Assertion Markup Language (SAML) to allow identity providers (IdP) to pass authorization credentials to service providers (SP). This page provides instruction to use Okta to implement SSO for SearchStax.

SSO is an add-on SearchStax feature that is purchased separately as part of the Security Pack. If you are interested in the Security Pack, please contact Sales.

Once SSO is enabled for your account and a domain is set up, the admin is able to see the configuration options in the User Preferences screen of the SearchStax Studio Dashboard.

The following steps explain how it can be set up for Okta.

Instructions

Once SSO is enabled by SearchStax for your account, and a domain is set up, the owner and/or admin can see options to set it up. The options to set up SSO are in the My Profile screen of the SearchStax Studio Dashboard:

1. You need to be an Admin in Okta to set up the SearchStax Application.

2. Go to the Okta Admin Console. Click on Applications > “Create App Integration”. Select “SAML 2.0” and click on “Next”

3. Enter the name of the App as “SearchStax Studio” and click on Next

4. Configure the SAML Settings with the following information:

• Set the “Single sign on URL” as the The Assertion Consumer Service URL provided in SearchStax Studio
• Check on “Use this for Recipient URL and Destination URL”
• Set the “Audience URI”as the Metadata URL provided in SearchStax Studio
• Set the “Name ID format” as “Unspecified”
• Set the “Application username” as “Email”
• Set the “Update application username on” as “Create and update”

5. Click on “Show Advanced Settings” and set “Response” and “Assertion Signature” to “Signed”. Below is a sample of Advanced Settings

*If you change the response and assertion settings, you will need to also change the SearchStax Studio “Assertions responses signed*” setting to match.

6. The next section provides Attribute Statements for mapping Okta fields to SearchStax. Below are sample mappings that we defined

The above example assigns the role of “Admin” to all users in SearchStax Studio. However, if you have a different field in Okta that maps the role, you can assign that field instead.

Click on Next.

7. Select “I’m an Okta customer adding an internal app” and click on “Finish”

8. Now click on the “View SAML setup instructions” button that is displayed to the right

9. Copy the “Identity Provider Single Sign-On URL” from the screen and set it as the Login url in SearchStax Studio.

10. Copy the “Identity Provider Issuer” from the screen and set it as the Idp entity url in SearchStax Studio.

11. Copy the XML shown in the Optional section with the title “Provide the following IDP metadata to your SP Provider” and host it on a URL (optionally, you can send it to us and we can host this for you). Copy this hosted IDP metadata URL and set it as the Metadata url in SearchStax Studio.

12. Now, set SSO to “Enabled”.

When you are testing, also check “Allow email password login” (You can turn this off once SSO testing is complete). Here is our example setting page:

Login Using SSO

On https://searchstudio.searchstax.com/ , click the “Sign-In using your ID provider” button.

Enter the domain.

Click Continue. This takes you to the Okta Sign-in page. After you authenticate, it brings you back to your SearchStax Studio Dashboard.

SSO + Two-factor Authentication

A User can have SSO and Two-Factor authentication both setup. The 2FA settings for a user will apply to all accounts that the user has access to.

However, for the account that has SSO Setup, while logging in, SearchStax 2FA settings will not apply. In that case, 2FA should be set up at the SSO Provider.

The post Single Sign-On – OKTA appeared first on SearchStax Docs.