Linked Account Configuration Introduction

Concept Introduction

Linked Account

In SSO, BI accounts can be linked with accounts in the authentication system to enable SSO login to the linked BI account.
Common SSO flow:

The authentication system passes a user identifier code

BI uses the code to call a series of authentication system interfaces to obtain the user's unique identifier in the authentication system

Query the linked BI account through this unique identifier + SSO method (Provider)

Special note:

If the corresponding BI account cannot be found based on the linked account, it will then query against the BI account.

BI Account

BI user login account, i.e., loginId, which can be queried in User management.

External Account

The field value used as the user's unique identifier in the authentication system is the external account, with the parameter name usually being externalUserId.

SSO Provider

Different SSO methods constitute a provider. Providers can be divided into the following categories:

Category	Corresponding Provider
OAuth2	standardoauth2
CAS	cas
SAML2	saml2
Guandata SSO	domain id
SSO Plugin	Customized in plugin
Custom Development	Contact Guandata colleagues for details

Configuration Introduction

Link Relationship

Each user can configure one external account for each SSO Provider. That is:

BI Account * SSO Provider -> External Account

API Capabilities

Through the provided public APIs, you can implement CRUD operations for user linked accounts. This capability is equivalent to BI administrators configuring single sign-on account linking.

Linked Account Configuration Introduction

Concept Introduction#

Linked Account#

BI Account#

External Account#

SSO Provider#

Configuration Introduction#

Link Relationship#

API Capabilities#