FastDraft Single Sign-On Options

This article is a guide to SSO options for dedicated instances of FastDraft.

This guide contains the following:

• Why use Single Sign-On?
• What options can BI provide?
  • Standard, non-SSO login
  • SSO Single
  • SSO Multi Tenant

Related Articles:

• How to Set Up SSO for On-Premise Active Directory
• FastDraft + SSO Using OAuth2
• Multi Tenant SSO
• Built Intelligence Single Sign-On and Multi-Factor Authentication Account Setup and Access

Why use Single Sign-On?

Single Sign-On (SSO) offers several advantages for users and organisations. Here are the main reasons why you might want to use it:

• Convenience - fewer logins, quicker access.
• Improved security - strong authentication, reduced password fatigue, centralised control.
• Compliance and auditing - centralised auditing, better control over permissions
• Reduced risk of phishing - minimising login prompts

What options can BI provide?

Built Intelligence can offer a number of login options for your dedicated FastDraft instance.

Standard, non-SSO login

The default login option is our standard username & password login. Users are set up with an email, and when they are added to the system they receive a password reset link which they can use to create their password. They will use both to log in each time they need to access the platform.

SSO Single

If your organisation has its own SSO tenant, you could choose to opt for the SSO Single login option, which means all of your platform users will use your organisation's SSO, including BI staff and any Supplier users.

Choosing this option means you will need to create SSO accounts for all users in your SSO/EntraID any time someone needs to be added to the platform.

SSO Multi Tenant

If you wish your organisation users to use your SSO, but prefer BI/Supplier users to use a different SSO, you can opt for SSO Multi Tenant. This is particularly useful if you know any of your suppliers also have their own internal SSO which they'd prefer to use. 

If enabled, the user will enter their username (email address) into a 'discovery' page which performs a look-up to find which SSO they will be using, and they will be redirected accordingly. 

The standard set up would be that users from your organisation use your dedicated SSO, whereas all other users by default will use BI's dedicated SSO, unless specified otherwise.

You can read more about this here.