August 28th 2024, Release Note: Fourth App/Engage: New Login Flow for Customers Using a Corporate IdP SSO and Branded URL

Summary

Please note that this is a release note with instructions regarding the Engage login page. You cannot log in or access the Fourth app from the Customer Success Portal.

Release date: August 28th 2024

• Enabled by default? - Yes
• Set up by customer admin? - No
• Enable via support ticket? - No
• Affects configuration or data? - No

What's Changing?

Fourth is now able to direct customer users with Federated SSO to their IdP automatically from the branded URL.

Reason for the Change

Part of ongoing improvements to the login page - improves the user experience and reduces time and steps to log in to Fourth.

Customers Affected

All customers with Federated SSO integration that use a branded URL to log in:

• August 2024: All Europe, Middle East and Africa (EMEA) customers logging in via [customer name].secure.fourth.com 

Customers in the following regions have already been switched over to the new login process:

• May 2023: All North America (NA) customers logging in via [customer name].secure.na1.fourth.com
• 2024: All Asia-Pacific (APAC) customers logging in via [customer name].secure.apac1.fourth.com

Release Note Info/Steps

The current login flow is:

1. The user navigates to their branded URL in the browser
2. The user selects a button to be directed to their IdP 
3. The user completes the authentication process in their IdP
4. Once authenticated by their company IdP, the user is redirected to Fourth

The above login experience will continue to apply for customers with store-level users who are required to log into Fourth Engage using their Fourth username & password.

For corporate users that log in via a company IdP, the new login experience will be improved as per the details below.

The new login flow will be:

For customers where all users are using the Corporate Identity Provider:

1. The user navigates to their branded URL in the browser
2. Fourth identifies the URL and the Federated SSO attached to the brand and automatically directs the user to their company IdP login page
3. The user completes the authentication process within their company IdP
4. Once authenticated by their company IdP, the user is redirected to Fourth

For customers with users that use the Corporate Identity provider and also users that use a Fourth username and password:

1. The user navigates to their branded URL in the browser
2. The user can see the username and password fields and the button to direct the user to the Corporate Identity provider (Corporate Sign In)
3. If the user has only a Fourth username and password, they will need to use the Username and Password fields to log in
4. If the user has Corporate credentials and uses the corporate IdP to log in to Fourth, they will select Corporate Sign In to be directed to their IdP 
5. The user completes the authentication process in their IdP or Fourth
6. The user is redirected to Fourth once authenticated

This will only be enabled for Web browsers, Mobile app users will still need to use the Corporate sign in to login 

Fig.1 - New Login Page for customers with Corporate IDP and Fourth Username/Password