Authentication Policy Page

Any user who certifies for the IDP authentication policy will be authenticated against the mentioned IdP. This authentication policy takes precedence over the CI Identity Store or Active Directory authentication policy.

The following is the flow for the user when the IdP authentication policy is enabled:

1. When a user hits the CI login URL, user must get an option to enter the username in the new login page.
2. If there is an active session in IdP for the user and if the authentication policy for the user is based on an IdP, it must take the user directly to the CI Landing page, else it must take the user to the IDP login page.
3. After authentication, the user must be redirected to the landing page of CI.
   For example, if your authentication policy is Okta, it will redirect to Okta.

4. If no IDP is enabled, then in that case you need a password. It redirects to Password page.