Book a Demo
Skip to main content
How can we help?
← Back to LocoDELEGATIONS Help
Print

Test SSO and Just-in-Time provisioning

Posted
Updated
ByAdrian Sole

Complete these checks after LocoSOFT confirms that the Microsoft Entra ID connection has been applied to the council’s LocoDELEGATIONS environment.

Prepare test users

  • Select one user for each configured application role.
  • Confirm each user is assigned to the enterprise application where assignment is required.
  • Confirm each user belongs to the intended Microsoft Entra security group.
  • Use a private or incognito browser window where practical to avoid an existing Microsoft session affecting the test.

Test the first sign-in

  1. Open the council’s LocoDELEGATIONS web address.
  2. Choose the Microsoft sign-in option.
  3. Sign in with the test user’s council account.
  4. Confirm that the user reaches LocoDELEGATIONS successfully.
  5. Confirm that the user can access only the functions allowed by their assigned role.

Just-in-Time provisioning

If the user does not already have a LocoDELEGATIONS account, the application creates one automatically during their first successful SSO login. This is Just-in-Time provisioning.

SCIM provisioning is not currently supported. Account creation occurs at first successful sign-in rather than through a separate SCIM synchronisation process.

Record the result

For each test user, record the time of the test, expected role, actual result and any error shown. Do not include passwords, tokens or client-secret values in the test record.

If the test fails

Check the enterprise-application assignment, security-group membership, redirect address and group-claim configuration. If assistance is required, send the non-sensitive test details and the approximate failure time to support@locosoft.co.nz.

Table of Contents