Achievers

Before You Begin

Introduction

This document describes how to configure Oracle Identity Cloud Service to provide Single Sign-On (SSO) for Achievers using SAML.

About Achievers

Achievers is a cloud-based employee recognition and engagement platform for aligning company and employee values to drive desired business results.

After integrating the Achievers application with Oracle Identity Cloud Service:

• Users can access Achievers using their Oracle Identity Cloud Service login credentials.
• Users can start Achievers using the Oracle Identity Cloud Service My Apps console.
• Administrators can assign and revoke user access to the Achievers application using the Oracle Identity Cloud Service administration console.

What Do You Need?

• An Oracle Identity Cloud Service account with authorization rights to manage apps and users (Identity Domain Administrator or Application Administrator).
• An Achievers account with authorization rights to configure federated authentication.
• An Achievers account with a verified domain to include when you register the Achievers app in Oracle Identity Cloud Service.
• Make sure that the email ID of each user in Achievers matches the primary email ID of the Oracle Identity Cloud Service account.

Configuring the Achievers App in Oracle Identity Cloud Service

Use this section to register and activate the Achievers app, and then assign users to the app.

Prerequisite Step

A verified domain name is required before you can register and activate the Achievers app. You obtain that domain name from Achievers.

The Achievers domain name appears in the Achievers home URL: https://<Domain_Name>.achievers.com.

Registering and Activating the Achievers App

1. Access the Oracle Identity Cloud Service administration console, select Applications, and then click Add.

2. Click App Catalog.

3. Search for Achievers, and then click Add.

4. In the App Details section, enter your domain name in the Domain Name field, and then click Next.

5. Click Download Identity Provider Metadata.

   Tip: This file is used later during the Achievers configuration in the "Configuring SSO for Achievers" section.

6. Click Finish. Oracle Identity Cloud Service displays a confirmation message.

7. Click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Assigning Users to the Achievers App

1. On the Achievers App page in Oracle Identity Cloud Service, select the Users tab, and then click Assign. The Assign Users window appears.

2. Select the users that you want to assign to Achievers, and then click OK. Oracle Identity Cloud Service displays a confirmation message stating that the Achievers app is assigned to the users that you selected.

Configuring SSO for Achievers

Send an email to Achievers with downloaded Oracle Identity Services metadata and request to enable SAML 2.0 for your Achievers account.

Verifying the Integration

Use this section to verify that SSO initiated from Oracle Identity Cloud Service (IdP Initiated SSO) works.

Verifying Identity Provider Initiated SSO from Oracle Identity Cloud Service and Achivers (SP Innitiate)

1. Access the Oracle Identity Cloud Service My Profile console: https://<IDCS-Service-Instance>.identity.oraclecloud.com/ui/v1/myconsole.

2. Log in using credentials for a user that is assigned to the Achievers App. Oracle Identity Cloud Service displays a shortcut to Achievers under My Apps.

3. Click Achievers. The Achievers home page appears.

4. Confirm that the user that is logged in is the same for both Achievers and Oracle Identity Cloud Service.

   This confirms that SSO that is initiated from Oracle Identity Cloud Service works.

Verifying Service Provider Initiated SSO from Achievers Networks

1. Access the Achievers Networks login page using URL: http://<Domain_Name>.achievers.com/.

You are redirected to the Oracle Identity Cloud Service login page.

1. Log in using credentials for a user that is assigned to the Achievers app. The Achievers home page appears.

2. Confirm that the user that is logged in is the same for both Achievers and Oracle Identity Cloud Service.

This confirms that SSO that is initiated from Achievers works.

Troubleshooting

Use this section to locate solutions to common integration issues.

Known Issues

Achievers displays the message "The server encountered an SSO error. Please contact your network administrator for assistance."

Cause: The email attribute sent by Oracle Identity Cloud Service during SSO doesn't match any existing user in Achievers.

Solution: Ensure that the user that you assign to the Achievers app has an account in both Oracle Identity Cloud Service and Achievers with the same email address.

Oracle Identity Cloud Service displays the message “You are not authorized to access the app. Contact your system administrator."

Cause 1: The SAML 2.0 integration between the Oracle Identity Cloud Service Achievers App and Achievers is deactivated.

Solution 1:

• Access the Oracle Identity Cloud Service administration console, select Applications, and then Achievers.
• Click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Cause 2: The administrator revokes access for the user while the user is trying to access the Achievers app using Oracle Identity Cloud Service.

Solution 2: Access the Oracle Identity Cloud Service administration console, select Applications, Achievers, Users, and then click Assign to re-assign the user.

Unknown Issues

For unknown issues, contact Oracle Support:

1. Go to https://support.oracle.com.

2. Select Cloud Support, and then sign in with your support credentials.

3. In the Cloud Dashboard, confirm that there are no planned outages in Oracle Identity Cloud Service, and then click Create Service Request.

4. Select Oracle Identity Cloud Service as the service type.

5. Complete your service request.