How can I provision users in Rally when using SSO

Products

• Rally SaaS

Issue/Introduction

How can I provision users in Rally when using SSO?

Resolution

Unfortunately, there are no options for automatically provisioning users (enable/disable/configure) in Rally through SSO.  An enhancement request has been submitted, please feel free to add your feedback via the in-app feedback button.  There are a few ways that can be configured to assist with this:

1.  New users can be created using the Excel add-in to import those users.  It is likely that customers would need to manually adjust or add Project permissions after the users are imported since the import can only provide limited field values and choices for users.

2.  The following links to a Rally GitHub script can also be used to import or manipulate users.  Please be aware that Agile Central Support does not support or maintain scripts on the GitHUb repository.

 (https://github.com/RallyTools/Rally-User-Management)

3.  If your subscription uses Okta as their SSO provider:

• The Okta User Provisioning Tool (OIN) is available as an app in the Okta integration catalog.  You can install it in your IdP and configure it with Subscription Admin credentials.  It uses WSAPI to make calls to Rally.  It will continue to work after we move to AuthHub SSO authentication.
  • https://help.okta.com/en-us/content/topics/provisioning/rally/rally-main.htm
• You will have 2 Rally app tiles; one for authentication (this part no longer works) and user provisioning (this is Okta OIN).  It is important that when you add the Rally Software app to your IdP, that you mark it as hidden so the end users don't click on it.  But still leave it active so that it continues to provision users in Rally via the API.  This instance should be renamed to indicate that it is still used for Rally Provision of users.

 

Here are some screenshots about how it looks to configure it below:

 

 

Additional Information

keywords: agile central, rally, sso, adding users

 

How to create a user with Web Services API

https://knowledge.broadcom.com/external/article?articleId=57526

How to create ProjectPermissions and add TeamMemberships with Web Services API

https://knowledge.broadcom.com/external/article?articleId=47760

Disable user with Web Services API

https://knowledge.broadcom.com/external/article?articleId=57573