Reltio Connect

Why the User ID's in Reltio is universal and not Customer Specific ? 

In our Organisation we use 2 different MDM domains in Reltio and both has Single Sign on enabled with the Email address as the username ( Reltio Does not provide any other attributes to map to User ID in SAML Federation).

Now when there is a situation if a user has access to both Tenants in the organisation and if he tries to login, he receives an error saying Email Address Already in use. 

In our Organisation both the MDM Domains use 2 different Customer and have multiple tenants under each customers. When the user of One Customer tries to login to another , this error occurs. 

As a work around, we used OIDC for one customer and SAML for another customer. In OIDC there is a way to map the user ID hence we use the Employee ID as username and for another customer we use Email address as username ( SAML does not allow to map different ID to username, it takes the Email address as username).

Is there any way to make the usernames specific to customer instead of making it universal ?

------------------------------
Gowthamprabhu Sivaraj
AstraZeneca
------------------------------

Gowthamprabhu, I share the frustration you articulate. I think it's fair to say that Reltio's user management scheme which includes the authorization architecture is an area that needs refactoring, enhancement and generally, modernization. It continues to be one of the areas of the platform that poses significant challenge for users and developers, increases the complexity of accessing tenants, and generally lengthens the time-to-value of the solution.

------------------------------
Curt Pearlman
PwC
Agoura Hills CA
------------------------------

Original Message:
Sent: 02-18-2022 05:00
From: Gowthamprabhu Sivaraj
Subject: User ID in Reltio

Why the User ID's in Reltio is universal and not Customer Specific ? 

In our Organisation we use 2 different MDM domains in Reltio and both has Single Sign on enabled with the Email address as the username ( Reltio Does not provide any other attributes to map to User ID in SAML Federation).

Now when there is a situation if a user has access to both Tenants in the organisation and if he tries to login, he receives an error saying Email Address Already in use. 

In our Organisation both the MDM Domains use 2 different Customer and have multiple tenants under each customers. When the user of One Customer tries to login to another , this error occurs. 

As a work around, we used OIDC for one customer and SAML for another customer. In OIDC there is a way to map the user ID hence we use the Employee ID as username and for another customer we use Email address as username ( SAML does not allow to map different ID to username, it takes the Email address as username).

Is there any way to make the usernames specific to customer instead of making it universal ?

------------------------------
Gowthamprabhu Sivaraj
AstraZeneca
------------------------------