# Guide: SSO sign-in portal

These are instructions for Digital Iceland development and collaboration partners to sign-up up to the central SSO identification portal (IdP) and to request access to apps that are maintained by Digital Iceland

#### **Initial registration to SSO portal**

* Go to **<https://access.stafraentisland.is/>**
* Use your work account to register (i.e. no Gmail or similar email users)&#x20;

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2FLwNrGI8o9xrfvBqcGE6p%2Fimage.png?alt=media&#x26;token=d2850c46-944c-4fde-a1dc-e78f0fe7a77a" alt=""><figcaption></figcaption></figure>

For initial registration you need to set up multifactor authentication (MFA), e.g. using your Authenticator app (or other MFA apps). Please follow the guidelines on the screen. Azure Entra will guide you through the onboarding process.&#x20;

#### **My Access (onboarding to SSO portal)**

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2F6aynOWbv1rPO4r7CvqNY%2Fimage.png?alt=media&#x26;token=4ce09ff2-6545-4644-952f-01ebd9c043c3" alt="" width="271"><figcaption></figcaption></figure>

* Once logged-in/registered on <https://access.stafraentisland.is/> you can see available apps and send a legitimate access request (business reason) for accessing particular apps managed by Digital Iceland. Under "My Apps" in the portal, you can see which apps you already have access to

#### **Request for access to app(s)**

* Click on "My Access" and "Access Packages" on the left toolbar (<https://access.stafraentisland.is>)
* To request access to a new app, you need to click on "Request" for that particular app (visible under "Available" tab), see image below:

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2F98c19fDZO7xbblwxd0YT%2Fimage.png?alt=media&#x26;token=44eacd52-7343-47fc-b76a-41650bc7a4ed" alt="" width="563"><figcaption></figcaption></figure>

* In the request you need to provide a reason for the access (e.g. a particular project, agreements or other collaboration reason)
* It's possible to request access for a limited period by marking "Request for specific period" and select "Yes" and then define the needed period. Click on "Continue" to finish the request, see image below:

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2FdmWEtj03fEWOAUfELwnF%2Fimage.png?alt=media&#x26;token=c5132ff5-2bb6-4d76-b4c7-30ae4733bff0" alt="" width="461"><figcaption></figcaption></figure>

Once a request has been sent, Digital Iceland will receive and email and will either grant or deny the access request, based on legitimate business reasons

You will receive an email once the access request has been processed

#### **My Apps (access to apps)**

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2FLHIh8doZ6AOJaAObI9cE%2Fimage.png?alt=media&#x26;token=f6d89ac5-9401-4a5d-b893-b66029615b2c" alt=""><figcaption></figcaption></figure>

After the initial onboarding into the SSO Portal you can access your systems/apps directly from **<https://apps.stafraentisland.is>**. Under "My Apps" you can see which systems/apps you already have access to through the SSO Portal. To access the app you need to click on the app logo and it will open in a new window:

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2Fwb5w0pfwbjKVLs4yjHpQ%2Fimage.png?alt=media&#x26;token=ba7c2cb8-21f3-445e-a98d-6c61d9df5e64" alt=""><figcaption></figcaption></figure>

#### **Common issues**

If you do not find the apps you should have access to, it's possible that your browser is directing you into your own Organization. To switch between Organizations you need to click on the icon in the top right corner of the browser window and select "Stafrænt Ísland"

<figure><img src="https://3924059971-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJWCB43mX_-7DO7e_Oj%2Fuploads%2Fz0VSrcfjCH5pI2UmaAkS%2Fimage.png?alt=media&#x26;token=d84e8c3d-c804-4e68-8215-1b1528d89841" alt=""><figcaption></figcaption></figure>

#### **Offboarding**

The SSO portal (Entra) will regularly run a flow script to check activity in each app. Users that have been inactive for **95 days** or more, for an app(s) that the user is already registered for, will have access removed from that app. This is the "offboarding" process for inactive users. Registered users will not be removed from the SSO portal itself, but only from accessing a particular app (inactive)

If a user, with removed access, needs access to the app again, he/she can request access like before by going into **<https://access.stafraentisland.is>** and send in a new access request &#x20;