TriLine Integration with Identity (Including MFA) and migration plan for all the TriLine customers
With this new release, there has been an integration with MFA where all the sites will be facilitated by a Multifactor Authentication for all the TriLine customers. This will enable our customers to reduce the risk of account takeovers and provide additional security for the users and their accounts. It is essential to add layers of security necessary to protect users and their data with the increasing Cyber security breaches.
Please note: All the existing TriLine customers will be migrated to the Identity sites and this migration will be performed in Phases (If you want to be in Phase I then please reach out to us at [email protected])
The customers would be able to see the following changes after the migration would be completed:
A universal Login page of Anasarada will be displayed while login to TriLine.
The user will use their email address to log in to TriLine.
TriLine customers would be able to enroll and use Multi-factor Authentication for the new users if they want to have MFA. (MFA will be enabled on demand only. If any customer do not require MFA then we will not enable this functionality).
Whenever a new user is created in TriLine then the new user will be able to sign up using the invitation email by filling in their essential details such as their Name and creating their own password (Previously your TriLine Administrator was performing these actions on the behalf of new users).
The users would be able to change their password using the identity Recovery Password Flow.
There will be no login changes to your site if you already have SSO.
Here are some Frequently Asked Questions for TriLine customers:
How it will look when an existing user will log into the Identity site?
The old TriLine login page will be replaced by a universal Ansarada login page that will appear on the login page to access TriLine as shown below:
How it will look like when a non-SSO customer Logins to TriLine Using the Identity site?
When a non-SSO customer will log in to TriLine then they have to log in using their email and Password as shown above.
How it will look like when an SSO user will log in to TriLine using the Identity site?
When an SSO user login to TrLine then the login is managed by your organisation's SSO. Users just have to provide their email address which will be detected by their SSO. The SSO user does not have to provide the Password. The users just need to enter their email address and then it will lead to TriLine My summary page.
See the example below:
4. What happens when a new TriLine user/position is created?
There are some changes in how the new positions are created. The ability to fill in first name & Last Name, Password and User ID for the TriLine Administrator has been removed. When a position is created, the Admin is required to fill in the below details only as shown in the example below:
Once the profile is created. An email notification will be sent out as per the screen capture below:
The new user has to complete their TriLine profile, which requires them to fill in their first name, Last name and create their password.
After following these steps the users will be able to login successfully in TriLine:
5. Does that mean that the User ID field will be completely removed from the position table?
Yes, the User ID field will no longer be available as now users will be able to log in using their email address. As shown below:
The only fields that will be available under the position tab are:
Title
First Name
Surname
Email Address
6. Can we have multiple roles for 1 email address?
Yes, Multiple roles can be created using 1 email address. You can easily change the user from the Profile Tab on the upper right-hand side.
You would be able to select the position as shown below:
7. How will this work for SSO clients with multiple profiles?
If you already have SSO then you can directly change the profile as shown above and login as the desired position. You can jump from one profile to another in a matter of a click. You will no longer be required to enter a password every time to switch to another profile.
8. Can TriLine customers use SSO?
After integrating with Identity, customers can follow the current process of Identity to enable SSO. (Request us via Support ticket, all the works are done from the Identity side)
We only have SAML SSO at the moment. We are always considering improvements in this area and would love to hear your feedback or requirements. Please let us know by sending us an email at [email protected].
Please check our Page on Single Sign On FAQ- SSO FAQ
9. Which URL is used to log in for Trilline users after integration?
The user would go to the usual Trilline login URL (Example demo: https://demo.triline-grc.net/xxxxx)
then he will be redirected to ULP (at: https://auth.au.ansarada.com/login?…..).
10. I updated my first name / last name on the Profile page of Ansarada, why don't I see it updated in Triline?
The system will sync this info every time the user login to Triline. So need to log in again to see them updated.
11. How to change your Password? (if you are not an SSO user)
If you are not an SSO user and you need to change the Password then you can change it easily by putting your email address and then clicking on ‘Don’t remember your password?'. Once done you will receive an email prompt as below to reset your password.
Once done you will receive an email prompt as below to reset your password. The link expires in 2 hours so you need to reset the password before it expires.
Please note: If you are an SSO user you don't have to worry about creating or changing the Password as it will be taken care of by your SSO and you will be able to log in through your SSO password.
12. How to give access to External Auditors?
To give access to external auditors you need to create their profile in TriLine using their own external email address and then they will receive an email with a link to complete their profile and create their own password. Once done they can easily access TriLine. To remove the External auditor you just simply need to Obsolete the position and their access to TriLine will be revoked.
If you have any other questions in relation to this then please feel free to send us an email anytime at [email protected].