Sign In to Your Account

After activating your account, sign in to your insightsoftware application(s) using the URL: https://app.insightsoftware.com. Depending on your organization’s authentication policy, you can sign in using one of two methods:

• Standard Login (single sign-on with insightsoftware products)
• Federated Login (single sign-on with your organization’s identity provider). The Platform Experience supports multiple identity providers, for more information see User Authentication below.

Standard Login

1. On the Welcome to insightsoftware! dialog, enter your email and select Continue.
2. Enter your password and select Sign in. The Verification dialog appears.
3. Enter the verification code sent to your email and select Verify Code. You have signed in.

Federated Login

Follow your organization’s IT Federated Single Sign-On (FSSO) user-added process.

Upon signing in, you will land on the home page where you can view products in your plan and navigate between account/user management tools.

User Authentication

The Platform introduces a unified approach to user authentication across the insightsoftware product portfolio. There are two primary ways to authenticate:

• Local Single Sign-on (SSO): Users only need to sign in once to access their insightsoftware products. Authentication is powered by Azure ADB2C and requires an email address for the username.
• Federated Single Sign-on (FSSO): User authentication is aligned with the identity provider. Platform supports identity providers that comply with the following login standards:
  • SAML 2.0
  • OpenID Connect
  • OAuth 2.0

  For information on connecting your identity provider, see Configure Service to Service Authentication.

Multi-Factor Authentication (MFA)

For enhanced security, multi-factor authentication (MFA) is enabled with the Platform. Upon log in, users must enter a verification code sent via email. After entering the correct code, users are redirected to the insightsoftware application.

MFA Frequency and Configuration

With SSO, users are prompted for a verification code upon every log in. For FSSO users, security and MFA policies are set by your organization's IT department.

Timeouts

When you sign in to your insightsoftware application, an access token is generated. This token allows you to access the application and its resources for a limited time (typically 60 minutes). If you remain active within the application, you won't notice the token expiration.

When your access token expires, the refresh token is required. Instead of requiring you to sign in again, the refresh token can be used to obtain a new access token.

When MFA is enabled, you need to enter a verification code upon login. This adds an extra layer of security. The access token and refresh token work together to maintain secure access. If your session lasts longer than the access token's validity, the refresh token helps to renew your access without needing to re-enter the verification code.

• Access token: Valid for 60 minutes, ensuring short-term access.
• Refresh token: Valid for 14 days, allowing you to renew your access token without re-authenticating.
• MFA: Prompted upon every login, ensuring secure access each time you sign in.