Set up how your employees log into Kenjo (SSO)

There are several options to log into Kenjo. In this article, you'll learn all the ways you can set up login options for your employees. This way, you can decide which login option best suits the needs of your organization.

TABLE OF CONTENTS

• What is Single-Sign-On (SSO)?
• Setup SSO
• Setup Two-Factor-Authentication (2FA)
• Login with SSO
• Login with 2-factor authentication (2FA)
• Tips to avoid log in issues

As a general rule, every user can access Kenjo after activating their account with the business email address you added to their personal profile. To do so, employees select the automated email from Kenjo in their mail inbox and create a password that is at least 8 characters long and contains at least one number, one uppercase, and one lowercase letter. Single Sign-On (SSO) increases security to your Kenjo account, saves time and will therefore make your and your employees' lives easier. In this article, we explain what SSO and 2FA is for, how you enable it and how your employees use it.

What is Single-Sign-On (SSO)?

Single Sign-On (SSO) is a login process that allows your employees to access various applications with a single set of credentials. Say goodbye to forgotten usernames and passwords! With SSO, your employees can authenticate themselves using their Google or Microsoft company accounts and access Kenjo with just one click. So they only need to remember one set of log in credentials and you can reduce administrative costs and the number of accounts you need to maintainin in Kenjo.

Setup SSO

To activate the SSO feature, go to Settings > Security. In the SINGLE SIGN-ON section, you will see all the options available to you.

You have three options for each of the three SSO service providers (Google, Microsoft, Apple):

• SSO deactivated: Here, you are not using Single Sign-On. Your employees will always log in with their business email and password combination.

• Basic SSO: With the Basic SSO option activated your employees can either use their Google or Microsoft SSO or log in with their business email and password. To use the former, your employees click the Sign in with Google or Sign in with Microsoft button in the login form in desktop view or click on the Google, Microsoft, or Apple icon in mobile view to log in with their respective credentials. 

• SSO with approved domains: Employees have to log in using SSO with a specific business domain which was set up by you. You can specify multiple domains. Now, all employees with a business email address with these domains have to log into Kenjo via Google or Microsoft SSO. Exceptions are made for contractors, freelancers, or users who do not have a business email address with one of the domains. They can still log into Kenjo using the email address stored in their employee profile. 

While you set up the SSO log in process for your company make sure to keep the following things in mind. 

When you want to use Microsoft SSO, please make sure that the employee's email-address they use to log into Microsoft needs to be identical to the email that is stored in their employee's profile in Kenjo.

Since Kenjo is not compatible with Internet Explorer, you should use a different browser to access Kenjo.

Note that with Single Sign-On, a third-party service (Google, Microsoft, or Apple) handles the verification process. This means that access to Kenjo is granted through a trusted, well-known third-party provider. If there are login issues with SSO, the service provider typically denies access due to an issue on their end. 

Change between SSO options

You can enable multiple SSO providers at the same time (e.g. Google SSO and Microsoft SSO). As soon as you click on a second SSO choice we will send you an in-app message to make sure you know about your SSO choices.

If you switch within one SSO provider, e.g.  from a Google SSO with approved domains to a basic Google SSO, each of your employees will receive an automated email to reset their password. With this change, all your employees will need to set a new password for Kenjo. 

If you enable SSO, you cannot enable 2-factor authentication (2FA) and vice versa. 

Set up Two-Factor-Authentication (2FA)

To secure your data and devices more effectively, you can add two-factor authentication to your Kenjo account. This ensures that only you can access your account, even if someone else knows your password.

To activate this feature, go to Security > 2-FACTOR AUTHENTICATION settings and toggle the first switch.

You can enable 2-factor authentication for specific employees or for all employees. If you choose the first option, use the search bar to find the respective employees and click SAVE.

Login with SSO

When you visit the Kenjo website or app you will see this login form. To log in via SSO, click on SIGN IN WITH GOOGLE or SIGN IN WITH MICROSOFT or click on the Google, Microsoft or Apple icon in mobile view. Depending on the SSO option activated you can also use your work email and password combination to log into Kenjo. 

Desktop view of the login form in the browser		Mobile view of the login form

After clicking on the icons or on one of the SIGN IN buttons you will be lead to the SSO provider's website where you enter your Google, Microsoft or Apple credentials. Now you will  directed to your Kenjo Home Screen.  

Login with 2-factor authentication (2FA)

When 2-factor authentication is enabled, it works as follows:

• Enter your email address and password on Kenjo (desktop or mobile)
• Click Login
• A new login screen will appear to enter a one-time password
• Check your email inbox for the 6-digit code.
• Enter the 6-digit code or copy and paste it into the login screen and click SUBMIT
• You will be successfully redirected to the Kenjo homepage

Since your password alone is no longer enough to access your account, 2-factor authentication significantly enhances the security of your Kenjo account and data.

The code expires after 5 minutes, so make sure to use it within that time frame. 

2-factor authentication only works when you are logged out of your account, meaning when you don't have an active session in your Kenjo account.

Tips to avoid log in issues

These are the recommended steps for your employees if they experience trouble accessing their Kenjo account, even if the correct work email is used. If someone is unable to log in to Kenjo, they should try the following steps:

• Make sure to use a browser other than Internet Explorer, as Kenjo does not support it.
• If you use multiple email addresses, ensure that you're using the one linked to your Kenjo account.
• Clear the cache and cookies in your browser and try again.
• Try logging in from a different network, such as your mobile device's network, to check whether there is a network issue.
• Enable third-party cookies in your browser settings. Learn more in this article.