Signing in for the first time through your company directory

Somebody your company directory signs in, with no TRANXACT account yet, is given one that reaches Help & Support only — and a button to ask for the access they need.

Where your company signs in through its own directory (single sign-on, for example with Microsoft Entra ID), a new colleague does not have to wait for somebody to create their account before they can reach TRANXACT. This works for any directory connected through OpenID Connect. The first time they sign in, an account is made for them — but it opens nothing except Help & Support until an administrator gives them a role.

What the new person sees

1. Sign in with your company account as usual.
2. A short page says that your account was just created, and that you have access only to Help & Support until an administrator gives you a role.
3. Press Ask for access. A ticket opens already filled in — "Please give me access to TRANXACT" — for you to add what you need and send.
4. Follow the ticket, and every answer to it, from the same page (My tickets). Once you are given a role, the modules appear on your next screen.

What the administrator does

• Platform → Access → Users lists the new person marked "Created at first sign-in".
• Open the user and give them the role their work needs. The Help & Support only role can then be removed. Nothing else needs doing: the modules appear on their next screen, with no need to sign in again.
• Answer their ticket so they know the access is in place.

Turning it on or off

The switch is Create a sign-in for new people (Help & Support only), on the connection under Platform → Access → Single Sign-On. It is on by default when a connection is set up. When it is off, a person must already exist in TRANXACT before the directory can sign them in.

• An account is made only after the directory’s sign-in has been verified, and only for an address on the connection’s verified domain.
• An address that already has a TRANXACT account in a different company is refused, and the message says so: an administrator can give that account access to this company, or move it here. Turning the switch on does not help in that case.
• An account an administrator has switched off stays switched off: signing in through the directory never switches it back on.

Since 20 October a connection can be SAML 2.0, and new connections ask the TRANXACT second step after the directory unless you trust the directory’s MFA. See SAML single sign-on, SCIM provisioning and the Security administrator.