3rd Party Authentication Services

Beginning with GlobalSearch 6.1 and GlobalCapture 3.0, user authentication can be integrated with third-party identity providers, including:

While Square 9 does not resell, support, or configure these authentication platforms, organizations using a supported provider can leverage those services to manage authentication for GlobalSearch users.

For providers that support it, SCIM-based provisioning of Users and Groups within GlobalSearch is also available.

Square 9’s third-party authentication model is built on OpenID Connect (OIDC), a standards-based identity layer built on top of OAuth 2.0. Customers using third-party authentication services may also engage Square 9 Development Services to extend authentication capabilities to additional solutions. Contact your Square 9 sales representative for more information.

Please note the following requirements and considerations:

• Third-party authentication providers must support an OIDC login flow. Legacy SAML-based integrations are not supported.

• Optional user provisioning is available for providers that support SCIM 2.0.

• If you are unsure whether your provider supports OIDC, Square 9 can assist in evaluating compatibility and implementation requirements.

• Compatibility with a provider should not be assumed without proper configuration and validation on both the provider and Square 9 sides.

Square 9 strongly recommends provisioning all GlobalSearch users with an email address as their username. For third-party authentication, email is a required user attribute within the identity provider, and corresponding GlobalSearch accounts must also use email address formatting. Existing GlobalSearch users that do not use an email address format will need to be updated or recreated.

Permissions management remains within the standard GlobalSearch administrative interface. Square 9 strongly recommends using Groups to manage permissions for both native GlobalSearch users and users authenticated through third-party providers.