Manage access with SSO

As a subscriber, you have access to additional features for organizations which grant control of authentication and organization access. You can also provide limited overrides within the organizations. These features are typically used by companies with specific needs beyond the capabilities provided by the HERE platform.

HERE account executive sign-in

The HERE account executive sign-in feature allows authorized users, designated as the role of Org Admin, to sign in to an organization using their Single Sign-On (SSO) credentials which work in combination with HERE SSO.

This feature provides HERE support admins access to customer organization accounts. This is critical when your organization uses your own identity provider and you aren't able to add the HERE support admins into your active directory listing.

The following are available options for the HERE account executive SSO:

Option 1: HERE support admins can't access your accounts (default)

This option prevents any HERE employee from accessing your organization for any reason.

🚧

Caution

If you experience any issues in your organization for which you need support, you must change this setting before a HERE support admin can provide you assistance.

Option 2: Allow anyone from the HERE support admin team to access your account

This option allows any HERE support admin to access your organization for any reason.

Option 3: Give account access to only the following HERE Support admin members

This option gives account access for your organization to only the HERE support admin members that you name. Enter up to five specific email addresses of HERE support admins to invite them to assist you. This sends an email invitation to all of the email addresses you selected. You can revoke the access to any HERE support admin at any time.

Any HERE support admin who is a member of your organization identifies on the “Users” tab with a badge next to their name, as shown in the following image. You can revoke the access of any HERE support admin.