How to enable Single Sign-On for Knox Manage sub-administrators

Environment

• Knox Manage (KM)
• SamsungKnox.com

Overview

Your Knox Manage (KM) sub-admins may report that they cannot launch KM from their Knox dashboards. This knowledge base article provides guidance on how to enable Single Sign-On (SSO) for your sub-admins to resolve the console launch issue.

How do I set up Single Sign-On for my Knox Manage sub-administrators?

Currently, KM has a separate user management system from SamsungKnox.com. Only the user who created your KM tenant has automatic SSO access to KM. All users created by the original admin must sign into KM using the direct sign-in URL.

If you want to enable SSO for additional KM admins as the original admin, follow the steps below:

1. In KM, create the sub-admin using the user's email address as the Admin ID.
2. Using the sub-admin's email, register for an account at SamsungKnox.com. If you are also using one of the Knox Cloud Services, invite the admin from that service first to ensure they can access both.
3. From your Knox User Dashboard, create a Knox Manage support ticket with the following details:

I would like to request SSO access for <sub-admin email> into the user <KM Admin ID> in my Knox Manage tenant <tenant id>.

After the KM team processes your request, the sub-admin can then launch KM via SSO from their Knox User Dashboard.

How do I change the Knox Manage Single Sign-On (SSO) mapping for my account?

If you want to access your KM user through SSO or use your SamsungKnox.com account to access a different KM user, you can submit a Knox Support ticket to request that SSO be enabled for your account.

In your ticket, include the completed template below:

I would like to request a change to my Single Sign On (SSO) mapping for Knox Manage.

I will be (mark one):

[X] using a different email (SamsungKnox.com account) to access my Knox Manage user via SSO

[ ] using the same email (SamsungKnox.com account) to access a different Knox Manage user via SSO

Current User Samsung Account Email: <admin@company.ca>


Current KM Admin ID: <admin>

Current KM Tenant ID: <company.ca>

Current KM Region: <eu04>

To-be User Samsung Account Email: <new_admin@company.ca>


To-be KM Admin ID: <admin>

To-be KM Tenant ID: <company.ca>

To-be KM Region: <eu04>

NOTE—In the example above, the admin is using their new Email ID to access the same KM user via SSO from their Samsung Knox User Dashboard.