What is Single Sign On?

Single Sign On (or SSO) technology is a service that permits users to use One Logon to access multiple systems.  LSC has implemented SSO using a software called Okta.  Using Okta, we have a single, integrated platform that offers you secure access to enterprise applications and information.

Who do I contact if I am experiencing trouble with my SSO?

If you need assistance with SSO or other technical problems, contact the OIT helpdesk at 202-295-1680 or [email protected] .

Can OIT see my login information?

Nothing has changed in this regard.  OIT can still see your username, but he or she does not have access to your password.

Which browsers does SSO work on?

Single Sign On supports the following Web Browsers: Internet Explorer, Safari and Chrome.

What happens if SSO goes down?

Okta, which is the software LSC uses to manage our Single Sign On functionality, is built on an “Always On” architecture. You can always go to www.okta.com/trustto see their high reliability metrics and to learn more about the reliability of the service. Even if Okta were to go down, you would still be able to access most if not all of your applications directly  you would simply not be able to log in via Single Sign On. 

I use a Forti token to VPN into my computer.  How will SSO affect me?

When using your Forti Token, you are, for all intents and purposes, working on your office computer (albeit from a remote location.)  SSO does not impact how you use your Forti token, and your experience with SSO will be the same when you are using your VPN as the experience of staff working in the office.

For more detailed information go to Working from the Office and SSO Portal Basics.

I telecommute, but I am not using Forti token to VPN.  How will SSO affect me?

Staff that telecommute and do NOT utilize a VPN to log into the LSC network, can access their Okta dashboard by logging into LSC.OKTA.COM.  The dashboard can be used to access your applications.  You can also simply open your applications as you have always done.  When remotely accessing Box, Office 365, and Salesforce, remote (NON VPN) users will be prompted to acknowledge that they are part of LSC and prompted to provide their LSC network username and password.  Once you have provided your username and password to Okta, so long as that user session is open, you will NOT be asked to provide your user credentials for Box, Office 365, or Salesforce again - during that user session.

Where do I log in to get to Single Sign On?

You have three options to open single sign on:

• Use your desktop Single Sign On (OKTA) icon, or
• Enter the Single Sign On URL  LSC.OKTA.COM  in your browser,  or
• Use your browser link in the upper right hand corner of your browser. 

For detailed step by step directions, go to How to Access SSO.

Why do I need to set up a secondary email?

When you first set up your profile with Single Sign On (OKTA), you will be asked for a secondary email.  Secondary emails are useful in case you forget your password. If your helpdesk administrator allows you to receive 'Forgotten Password' help, then you can request a password help link be sent to your email address.  The password help will come to your secondary email as well as your primary.  That way, if you are unable to access your LSC Outlook account, you will still have the ability to reset your password. 

If you need to reset your secondary email password, use the detailed step by step directions available at Setting up or Changing your Secondary Email.

Why do I need to provide my cell phone number?

When you first set up your profile with Single Sign On (OKTA), you will be asked for a cell phone number.  You can choose to NOT provide the information, but we encourage you to provide it at the time of setup.  Okta uses your cell number to help you get access to the system if you forget your password.

How can I change my secondary email address information?

If you need to change your secondary email address information, use the detailed step by step directions available at Resetting your Secondary Email.

How do I change my Single Sign On password?

You have a few options to change your password for Single Sign On:  You can change it in OKTA or you can change it in Active Directory with the traditional change password functionality.

If you need to change your Active Directory password remotely, use the detailed step by step directions available at Changing Your Network Password Remotely Using Okta

How can I change my Forgotten Password question?

If you need to change your security question for password recovery, use the detailed step by step directions available at Changing your Password Challenge Question.

What is my user name and password for SSO?

Users that are logged into their computer and working from the office do not need to log into SSO.  When you log into your computer in the morning, you will have immediate access to SSO.

If you don't know your computer user name or need help resetting your password, contact the helpdesk at 202-295-1680 or [email protected]. 

Can I REMOTELY change the password that I use to access the LSC network?

Yes, you can.  In the past, users that worked remotely did not have direct access to changing their network password.  However, SSO enables users to remotely change their passwords using Okta.  For  more information, go to Changing Your Network Password Remotely Using Okta.

Is my password secure?

Yes, your password is secure.  Okta encrypts the password and only you have access to it in clear text.

How often do I need to change my password?

LSC policy requires that you change your password every 90 days.

What are the password requirements?

Your password must contain:

• At least 8 characters, and THREE OF THE FOLLOWING
• 1 upper case letter, 
• 1 lower case letter,
• 1 number, 
• 1 special character.

Users cannot repeat the last three passwords.

Finally, we encourage you to create a difficult-to-guess password, avoiding words like “password” or your daughter/son’s name (for example).  And please don’t copy your password and place it somewhere that can be found by others.

Why are some of my applications not included on the SSO portal?

As part of LSC’s implementation of SSO, we assessed the applications LSC staff used for integration into the SSO portal.  The initial launch was intended to provide staff with easy access to the systems that they use on a regular ongoing (daily) basis.  To that end, we integrated the most common applications such as Box and Office 365, etc.

If there is an application that you use as part of your work for LSC that was not part of the initial integration into the portal, please feel free to contact the HIR Helpdesk and suggest additional integrations.

If there are personal applications that you use as part of the LSC incidental use policy that you would like SSO to manage, then use the Adding Applications to SSO user guide.

How do I change my password for an application?

To change your password for a specific application, hover your mouse over the app's icon. Click the gear to go to settings, which should open a menu that gives you the option to change your password for that specific application.

Go to How to Change Your Username or Password for Personal Applications for step-by-step instructions.

Can I be confident my password is safe?

Yes.  Nobody (including the helpdesk) has access or visibility into your password data.

How do I change my user name/password for an Application managed by SSO?

To change your existing password, hover the mouse above an application's icon. On the upper right-hand side of the icon, there will be a gear. Click the gear to open the settings menu, and provide your current user name and password to verify your identity. Once verified, you'll be able to put in a new password.

Go to How to Change your Username or Password for Personal Applications for step-by-step instructions.

If you are not able to update the user name and password, contact the helpdesk at 202-295-1680 or [email protected]  to request a password reset.

How do I create a new tab on my dashboard?

To create a new tab, click on the '+' sign next to the last tab. You will be asked to enter a new tab name (for example, "Personal"). Enter the new name of the tab and click save to create it.

How many tabs can I have?

You can have up to five tabs.

How do I delete a tab?

To delete a tab, you will need to move all applications off of that tab onto another one.  Once the tab has been emptied, you will see a Delete Tab option.  Select that option and your tab will be deleted.

How can I change the order in which my apps appear?

To change the order of your apps, click and hold on an app icon, then drag and drop the app to the location you would like it to be displayed.

How do I move an app from one tab to another?

To move an app from one tab to another, click and hold on the app icon, then drag and drop your app to the new tab.

How do I remove an app?

Apps you've installed can be removed by hovering over the app and selecting the gear icon. In the app setting screen, you'll see the option to delete it. 

Apps issued by LSC cannot be removed, but there is a way to move the app out of sight. The best way to do so is to create a new tab to store unused and unwanted applications.

Go to Removing an Application from SSO for step-by-step instructions.

How do I add a personal application?

On the top right of your dashboard there is an “Add Apps” button. Select that button, using the browser of your choice, navigate to the application you want to add, and click the “Add” button on the right to place it on your dashboard.

Go to Adding Applications to SSO for step-by-step instructions.

How do I request an application to be added for everybody’s use?

If there is an application that you use as part of your work for LSC that was not part of the initial integration into the portal, please feel free to contact the HIR Helpdesk at 202-295-1680 or [email protected]  to suggest additional integrations.

You can also use the handy "Request an App" feature at the bottom of the dashboard.  Clicking on Request an App will open a dialog box where you can enter information about the app you feel would benefit LSC staff to have access on their dashboard.  Enter the information and click on the green "Send to Legal Services Corporation IT" button to send it to IT.

What is a bookmark?

A bookmark is a way to save the URL login of an application not currently available to you. When you create a new bookmark, your SSO dashboard will display an app icon to that application URL login. This bookmark will only store the URL- not your user name and password.

How do I add a bookmark?

To add a bookmark, go to the "Add Apps" button on the top right of your dashboard to open a search menu. Search for your app. If no app is found, SSO will display the option to create a bookmark. Enter the URL of the app and the name of the bookmark you would like displayed. Click the “Add” button to create your bookmark.  Click on "Home” at the top of your dashboard to see your new bookmark.

Go to Adding Applications to SSO for step-by-step instructions.

How do I Search for an application on my dashboard if I can't remember which tab I put it on?

At the top of your dashboard, you can find apps in the "Launch App" search bar. If you can't remember which tab your app is on, go to the Launch App search, type in the name of your app and select the name to open it when it appears.