Overview
The WorkOS Admin Tool is integrated directly into Reddy’s platform, providing a centralized interface for managing your organization’s SSO connections and configurations. For comprehensive documentation, refer to the WorkOS Admin Portal docs.Centralized Management
Manage all SSO connections from one interface
Real-time Monitoring
View session logs and authentication metrics
Quick Configuration
Edit IdP settings and domain restrictions
Troubleshooting Tools
Access detailed logs for issue resolution
Accessing the Admin Tool via Reddy
1
Navigate to Settings
Go to Settings → SSO Admin Portal in your Reddy platform.
2
Open Admin Portal
Click the “Open Portal” button to securely launch the WorkOS Admin Portal.
The portal opens in a new tab and maintains your Reddy session for seamless access.
Admin Portal Features
Connection Management
The Admin Portal provides comprehensive tools for managing your SSO connections:- View Existing Connections: See all configured identity providers
- Add New Connections: Set up additional IdP integrations
- Edit Configurations: Modify SAML/OIDC settings for existing connections
- Test Connections: Validate SSO functionality before deployment
Domain Management
Control which email domains can authenticate through SSO:- Verify Domains: Add new email domains for automatic user verification
- Restrict Access: Remove or modify domain permissions
- Domain Status: View verification status for all configured domains
Attribute Mapping
Configure how user information flows from your identity provider to Reddy:- Email Mapping: Ensure proper email address handling
- Name Attributes: Map first name, last name, and display name fields
- Custom Attributes: Configure additional user data if needed
- Group Mapping: Set up group-based access controls
Session Monitoring
Monitor SSO authentication activity and troubleshoot issues:- Session Logs: View detailed authentication attempts and results
- User Activity: Track individual user login patterns
- Error Analysis: Identify and diagnose authentication failures
- Performance Metrics: Monitor SSO response times and success rates
Troubleshooting with the Admin Portal
Session Logs
Each session record includes comprehensive information:- Request/Response Details: Full SAML/OIDC message content
- Timestamps: Precise timing of authentication events
- User Identity Attributes: Complete user data from your IdP
- Error Messages: Detailed failure reasons and suggested fixes
Common Troubleshooting Scenarios
Authentication Failures
Authentication Failures
Using Session Logs:
- Navigate to the Session Logs section
- Filter by failed authentication attempts
- Review error messages and user attributes
- Check for misconfigurations in attribute mapping
- Missing required user attributes
- Incorrect email domain configuration
- Certificate validation errors
- Time synchronization problems
User Access Problems
User Access Problems
Diagnostic Steps:
- Check user’s email domain in the Domain Management section
- Verify user assignments in your identity provider
- Review attribute mapping for completeness
- Test with a known working user account
- Add missing domains to the verified list
- Update attribute mapping configuration
- Verify user assignments in your IdP
Configuration Changes
Configuration Changes
Making Updates:
- Use the Connection Management tools to edit settings
- Test changes in a staging environment first
- Monitor session logs after deployment
- Coordinate with your team for user communication
- Document all configuration changes
- Test with multiple user accounts
- Monitor for 24-48 hours after changes
- Have rollback procedures ready