Login screen behavior
The login screen is where users enter their credentials to authenticate and access Medallia Web reporting.
Several factors determine when a user can see the screen, and what options appear on the screen, including:
The URL the user provides to access Medallia Web reporting.
Whether or not the company is using Single sign-on (SSO) for authentication.
The presence of the "Log in with SSO" button (defined by Single sign-on screen).
The IP address of the user's computer (defined by Logon Restrictions).
The presence and text of the "Get Access" link (defined by Login screen options).
All of the above factors — except the "Get Access" link — affect what happens when a user attempts to access the login screen, starting with the URL.
There are three forms of URL that access the login screen or initiate authentication:
| URL form | Behavior |
|---|---|
| https://INSTANCE/ | Identifies a server instance, but not the company. |
| https://INSTANCE/COMPANY | Identifies the company on the instance. Important: Users navigating to an instance with /COMPANY on the URL link without an IDP configured see a warning message on the login form stating, "No Identity Providers are configured". This message is informational and does not block the user from proceeding with their username and password.Medallia recommends using Single sign-on (SSO). |
| https://INSTANCE/sso/COMPANY | Single sign-on authentication only; no login screen, but may prompt to choose the IdP. |
The following sections describe how the options affect the screens users see when the navigate to the various URL forms.
https://INSTANCE/
This form of URL identifies a server instance, but not the company. The login screen prompts for username, password, and company, and since SSO is a company-specific feature, no SSO options are available.
https://INSTANCE/COMPANY
This form ot URL identifies the company on the instance. Companies using SSO have the option to include a "Login with SSO" button on the login page. This option is enabled by Single sign-on screen.
This diagram shows what happens when a user uses this form of URL:
https://INSTANCE/sso/COMPANY
This form or URL specifies to use single sign-on (SSO) authentication only. Authentication is provided by an external provider (IdP). When a company has multiple IdPs, a page prompts the user to select the one to use. For detailed information, see Inbound SSO.
This diagram shows what happens when a user uses this form of URL:
