Library staff authenticate with Active Directory while volunteers u…

Question

Library staff authenticate with Active Directory while volunteers use a separate local or social identity provider. How should Access be set up?

Accepted Answer

Add both identity providers and use Access policies to choose which identity provider each application accepts. — Two front doors can share one building: staff use the AD badge reader, volunteers use the guest kiosk, and Access policy says which door each app honors. You do not dump volunteers into civic AD just to keep a single IdP. Carbon Black is not an Access IdP.

Answer

Merge volunteer accounts into civic Active Directory so only one identity provider can exist.

Answer

Configure Carbon Black Cloud as a second identity provider for volunteer SSO.

Answer

Disable Active Directory and force every staff member onto the volunteer social identity provider.

Library staff authenticate with Active Directory while volunteers use a separate local or social identity provider. How should Access be set up?

Short Explanation

Full Explanation