Messages XR Enterprise supports multiple authentication methods to verify user identity and control who can access the platform. District administrators can configure one or more of these options through Global Settings, including Facebook, Google, Apple, LDAP, and SAML.
The legacy login experience
This article references the Messages XR Enterprise legacy login experience. Need help understanding the new connected SSO experience? Check out "Authentication in Messages XR Enterprise: The Connected SSO experience" to learn more.
💡Quick answers
- What authentication options are available in Messages XR Enterprise? The platform supports Facebook, Google, Apple, LDAP, and SAML authentication, and you can enable more than one method at a time.
- Can I use more than one authentication method at the same time? Yes, if the first method does not recognize the user, the platform automatically tries the next configured method.
- Is SAML authentication available for teacher logins? Yes, SAML was designed specifically to allow staff members like teachers to sign in with their standard district credentials.
- Configuring authentication settings? Navigate to Settings > Global Settings, scroll to the Authentication section, and open it to configure your chosen method.
- Who should I contact to switch authentication methods? Contact your Client Success Manager or email clientsuccess@finalsite.com to get assistance with an authentication transition.
User authentication ensures that only authorized users are accessing school communications. Being able to verify the identity of all of your users ensures that messages and interactions are secure, helping to foster a trustworthy environment for all involved.
This article is for district administrators to understand what authentication options are available in Messages XR Enterprise.
Single sign-on is here!
A Connected SSO experience is rolling out to Messages XR Enterprise districts!
This upgrade includes:
- enhanced security with multi-factor authentication
- support for popular identity providers (IdPs) like Google or Facebook
- a single, modern login experience across Finalsite products
When enabled for your district, learn about the change in the article, "Authentication in Messages XR Enterprise: The Connected SSO experience."
Wondering which login experience you currently have?
If you see this login screen, your district has been upgraded to the connected SSO experience:
Learn more in "Authentication in Messages XR Enterprise: The Connected SSO experience."
If your district hasn't yet been moved to the Connected SSO experience, you'll see this legacy login screen:
This article covers the legacy login experience.
Authentication settings
Once the implementation and data teams have assisted you with the configuration of your authentication, you may or may not need to go in and configure the Authentication settings you see below attached to any of the Primary authentication options you see in your Messages XR Enterprise platform.
Important notes
It's possible to use different methods to verify your users' identities. If the first method doesn't recognize the user, it will automatically try another method you've set up. Finalsite's team can help you to choose the best options that work for your scenario. If you are out of implementation and considering a different authentication option, please reach out to your Client Success Manager or email clientsuccess@finalsite.com to receive assistance with an authentication transition.
Global settings > Authentication
Navigate to the Global settings tab in Settings.
Scroll down to the Authentication settings to open them up into a new window.
Here you can configure all of the settings which will control the authentication method(s) you would like to implement on your platform. Learn more about how to configure the authentication settings in the article, "Enable your authentication option."
Primary authentication options
Facebook authentication
Facebook authentication is convenient and secure for school communication platforms, using familiar login methods and integrating seamlessly. When users log in with Facebook, their profile and email address are shared, verified, and saved, ensuring quick and easy access. Future logins are streamlined, with Facebook automatically passing the necessary information for authentication.
To learn more, read, "Enable Facebook authentication."
Google authentication
Google authentication is a good option because it combines robust security, user convenience, seamless integration, reliability, and supports single sign-on (SSO) for a streamlined and secure login experience.
To learn more, read, "Enable Google authentication."
Apple authentication
Apple authentication ensures secure user verification by using methods such as Sign In with Apple, which employs Face ID, Touch ID, or passcodes, and two-factor authentication (2FA). It also prioritizes user privacy by minimizing data sharing and allowing users to control what information is shared with apps and websites. This combination of security measures and privacy protection provides a seamless and trustworthy login experience.
To learn more, read, "Enable Apple authentication."
LDAP authentication
Using your LDAP directory server allows your district or school to provide single sign-in where one user name and password is shared between many different services. The information from your LDAP server will be used to authenticate the user. Users will not be able to update their user names or passwords through the platform.
To learn more, read, "Enable LDAP authentication."
SAML authentication
Some districts and schools use a third-party identity provider for user authentication. The district or school is in charge of their own identity management and provides support with the details on how to connect using Security Assertion Markup Language (SAML). This feature was designed for staff members, such as teachers, to sign in with their standard credentials.
To learn more, read, "Enable SAML authentication."
Login and authentication method
Please note that the authentication methods set up are specific to each individual district or school. To verify which methods will be used, please refer to your support staff for further assistance.
To get started with your district or school's communication platform, Messages XR Enterprise, you'll first need to get logged in.
Get logged in
-
Once you are provided with a link, navigate to the login screen.
- User ID: Enter the login ID username assigned to you.
-
Password: Enter your password.
OR -
Sign in using:
- Google: This is common for districts who use Google as the backend for their email services. If already signed in, no need to sign in again. If prompted, however, enter email address > Next > etc.
- Facebook: You will see a normal Finalsite login if no Google or SSO sign on is present.
- Single sign-on: Enter the same username / password that you enter on your site everyday.
Forgot my password
Don't know your password? Select Forgot my password beneath the password field.
- Enter your User ID and click the Reset button.
- Check the email address associated with your account for a "New Password Notification" email from Finalsite.
- You can also contact your district administrator to reset your password.
Don't have an account? Sign up!
This is a feature for community members who are not automatically added to the system through an SIS integration, allowing them to select from a list of notifications for communication they wish to be included on. Sometimes alumni, as well as friends and relatives of students, enjoy being looped in on communication going out regarding sports or other events.
On the Reset password window, click Sign up next to Don't have an account yet. A Notification sign up window will open up.
- Add account details.
- Create a password and contact details.
- In the right hand column, check the box next to communication types you'd like to receive notifications for.
Multiple accounts found
There is a unique scenario where, when logging in, there are more than one accounts linking to the same user or email address. In this case, a window will appear, asking you to choose which Role you'll be signing in as.
Messages XR Enterprise supports multiple authentication methods to verify user identity and control who can access the platform. District administrators can configure one or more of these options, including Facebook, Google, Apple, LDAP, and SAML, through Global Settings.