Preparing for IRIS Identity (Okta) - what you need to do (admin)

We are soon transitioning to our new identity management solution, IRIS Identity (Okta), to improve security, features, and overall user experience. As part of this change, adjustments are required for how you and your company interact with IRIS HR Professional.

Actions to prepare for IRIS Identity

The steps you need to take depend on your current setup:

Recreating existing API users

What you need to do

If someone or your company can access the API via a role, assigned through their Set Rights, or you have setup an integration with another system that uses the API, you must:

  1. Recreate your API users using our dedicated API management area.

  2. Share the new API user credentials with any connected systems.

  3. Once successfully tested, delete the old API user.

If you have already created your API users via System Tools > Utilities > Company > API Users, no action is required.

Identifying users with API access

To identify your users with API access, email us at productteam-staffologyhr@iris.co.uk. We are happy to help.

If certain users no longer require API access, remove their API Set Rights permissions.

Recreate your API users

To ensure continued access, create your new API users as soon as possible. Failure to do so may result in the denial of API access when we transition to IRIS Identity later this year.

Single Sign On (SSO)

If your company currently implements SSO into IRIS HR Professional, you must federate your directory with IRIS Identity to allow employees to use their company credentials to sign in to the system.

Both admins and IT departments have steps to complete:

Steps for IT departments

  • Share this help article with your IT department.

  • Ask them to follow the instructions detailed on the Federating with IRIS Identity topic on our IRIS Identity help centre.

Steps for admins

Failure to do so will result in all employees using SSO being denied access to IRIS HR Professional when we transition to IRIS Identity later this year.

Next steps: transitioning to IRIS Identity

Once your SSO is successfully configured, when we transition to IRIS Identity later this year, your new SSO credentials will activate.

Existing IRIS identity users

What you need to do

If you currently sign in to one of IRIS's cloud products using IRIS identity (IRIS BioStore Portal, IRIS Elements, IRIS ParentMail, IRIS Reach, Staffology Payroll):

  • Retain your username and password.

  • When we transition to IRIS Identity later this year, sign in to IRIS HR Professional using your existing credentials.

Standard username and password users

If you currently sign in to IRIS HR Professional using a username and password, no actions are needed.

  • We will securely transfer your credentials.

  • Continue accessing IRIS HR Professional as you currently do.

IRIS Earnie, IRIS Payroll Business, and other IRIS Desktop Payroll Products

If your HR software integrates with IRIS Earnie, IRIS Payroll Business, or another IRIS desktop payroll product that requires a username and password, you must create a new integration user via the API management area in IRIS HR Professional.

After creating your API user credentials, configure the integration and enter the credentials into IRIS Earnie, IRIS Payroll Business, or any other IRIS desktop payroll product you are using.

Custom login screen

Some companies use custom login screens created before the introduction of the Custom Login Screen Builder. As a result, the move to IRIS Identity may visually affect these screens.

If this applies to your company, we recommend updating your screen using the Custom Login Screen Builder as soon as possible. This will ensure a smooth transition to IRIS Identity when we transition later this year.

We are here to help

Our team is ready to support you through this transition. Do not hesitate to reach out to us at productteam-staffologyhr@iris.co.uk with questions or for assistance.

Thank you for your cooperation as we upgrade to IRIS Identity.