Skip to content
Help Center
Products
Back to KC LMS Integration

How to Manage External SAML Users

Summary

The Managing External SAML Users feature lets administrators review and maintain the external, SAML-linked user accounts tied to an account's single sign-on integration. From the SAML management form you can search for a specific external user, sort the list by any of its columns, and delete users who should no longer be linked. It keeps the mapping between your identity provider's users and their KnowledgeCity accounts accurate and current.

Introduction

When an account uses SAML single sign-on, each person who signs in through the external identity provider is linked to a KnowledgeCity account. Over time this list grows and can drift out of date as people join, change roles, or leave the organization. The SAML management form gives you a single place to see those external, SAML-linked users and act on them.

This feature is used by administrators and integration owners, the people responsible for provisioning access and keeping SSO connections clean. It solves the problem of finding a specific linked user quickly and removing entries that are stale, duplicated, or no longer authorized, without having to touch the identity provider directly.

Key Concepts

  • External SAML user: a user account that is linked through the external SAML identity provider rather than created directly in KnowledgeCity. Each entry ties an identity-provider identity to a KnowledgeCity account.
  • Username: the KnowledgeCity username associated with the linked user; shown as a column you can search and sort on.
  • External user ID: the identifier the identity provider uses for the user (the SAML subject). This is how the external system and KnowledgeCity agree on who the user is.
  • External email: the email address carried in the SAML assertion for the user, useful for matching a linked entry to a real person.
  • Date added: when the external user was first linked, letting you spot old or recently created entries.
  • Search: narrows the list to entries matching what you type, so you can find a specific user without scrolling.
  • Sort: reorders the list by a chosen column (for example by date added) in ascending or descending order.
  • Delete: removes the SAML link for a selected user, so that entry no longer maps the external identity to a KnowledgeCity account.

Steps to Follow

Opening the SAML management form

Sign in as an administrator and open the account's Integrations settings, then go to the SAML configuration for the account. The management form lists the external, SAML-linked users for that account, with a column for each user's Username, External user ID, External email, and Date added.

Finding a specific external user

Use the Search control at the top of the list to filter it. As you type a value, such as part of a Username, an External user ID, or an External email, the list narrows to the matching entries so you can locate the right user quickly instead of scrolling through everyone.

Sorting the list

Sort the list to bring the users you care about to the top. You can order the entries by a chosen column, for example by Date added to see the oldest or most recently linked users first, or by Username to browse alphabetically. Sorting works alongside search, so you can filter first and then order the results.

Reviewing a user before acting

Before you remove anyone, confirm you have the right person by checking their row's details together: the Username tells you the KnowledgeCity account, the External user ID and External email confirm the identity coming from the identity provider, and the Date added shows how long the link has existed. This helps avoid deleting the wrong entry when two users look similar.

Deleting an external SAML user

When an entry should no longer be linked, for example a person who has left, or a duplicate mapping, use the Delete action on that user's row to remove the SAML link. Because this unlinks the external identity from the KnowledgeCity account, verify the row first and remove only the entries you are sure about. Deleting here affects the SAML linkage in KnowledgeCity; manage the underlying account in your identity provider as needed.

Conclusion

The SAML management form gives administrators a straightforward way to keep external, SAML-linked users under control: search to find a specific person, sort by username, external user ID, external email, or date added to organize the list, and delete entries that no longer belong. Reviewing each row's details before removing it keeps your SSO integration accurate and your access clean.

Ask Casey about this article