Overview
The WorkOS Admin Tool is integrated directly into Reddy’s platform, providing a centralized interface for managing your organization’s SSO connections and configurations. For comprehensive documentation, refer to the WorkOS Admin Portal docs.Centralized Management
Manage all SSO connections from one interface
Real-time Monitoring
View session logs and authentication metrics
Quick Configuration
Edit IdP settings and domain restrictions
Troubleshooting Tools
Access detailed logs for issue resolution
Accessing the Admin Tool via Reddy
Admin Portal Features
Connection Management
The Admin Portal provides comprehensive tools for managing your SSO connections:- View Existing Connections: See all configured identity providers
- Add New Connections: Set up additional IdP integrations
- Edit Configurations: Modify SAML/OIDC settings for existing connections
- Test Connections: Validate SSO functionality before deployment
Domain Management
Control which email domains can authenticate through SSO:- Verify Domains: Add new email domains for automatic user verification
- Restrict Access: Remove or modify domain permissions
- Domain Status: View verification status for all configured domains
Attribute Mapping
Configure how user information flows from your identity provider to Reddy:- Email Mapping: Ensure proper email address handling
- Name Attributes: Map first name, last name, and display name fields
- Custom Attributes: Configure additional user data if needed
- Group Mapping: Set up group-based access controls
Session Monitoring
Monitor SSO authentication activity and troubleshoot issues:- Session Logs: View detailed authentication attempts and results
- User Activity: Track individual user login patterns
- Error Analysis: Identify and diagnose authentication failures
- Performance Metrics: Monitor SSO response times and success rates
Troubleshooting with the Admin Portal
Session Logs
Each session record includes comprehensive information:- Request/Response Details: Full SAML/OIDC message content
- Timestamps: Precise timing of authentication events
- User Identity Attributes: Complete user data from your IdP
- Error Messages: Detailed failure reasons and suggested fixes
Common Troubleshooting Scenarios
Authentication Failures
Authentication Failures
Using Session Logs:
- Navigate to the Session Logs section
- Filter by failed authentication attempts
- Review error messages and user attributes
- Check for misconfigurations in attribute mapping
- Missing required user attributes
- Incorrect email domain configuration
- Certificate validation errors
- Time synchronization problems
User Access Problems
User Access Problems
Diagnostic Steps:
- Check user’s email domain in the Domain Management section
- Verify user assignments in your identity provider
- Review attribute mapping for completeness
- Test with a known working user account
- Add missing domains to the verified list
- Update attribute mapping configuration
- Verify user assignments in your IdP
Configuration Changes
Configuration Changes
Making Updates:
- Use the Connection Management tools to edit settings
- Test changes in a staging environment first
- Monitor session logs after deployment
- Coordinate with your team for user communication
- Document all configuration changes
- Test with multiple user accounts
- Monitor for 24-48 hours after changes
- Have rollback procedures ready