---
description: This page contains company-wide settings that are applied to all projects.
---

# General Organisation Settings

<figure><img src="https://2536208400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqsq2dR7Fjagf5eTifWZx%2Fuploads%2F7YxKgTQD1NSB8QWfjOgj%2Forg%20settings.png?alt=media&#x26;token=be7e3ed4-3cc2-49d0-abb2-05a086eac429" alt=""><figcaption></figcaption></figure>

#### **Basics** <a href="#basics" id="basics"></a>

This page section contains information about the company:

| Setting          | Description                                                                                                                                                                   |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Company name     | The company name displayed in the upper left corner of the Asset Hub, unless a project logo has been uploaded under Branding                                                  |
| Default language | <p>When a language is selected, it will be shown by default to all users.</p><p>Please note that each user can change it individually through the settings in My Account.</p> |
| Session Timeout  | This is the default session timeout, which logs out the user after a certain amount of time after the last activity was made.                                                 |

#### &#x20;**Access management** <a href="#access-management" id="access-management"></a>

In this section, the company-wide security settings can be specified.

| Setting                     | Description                                                                                                                                                                                                      |
| --------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Multi-factor authentication | Enable or disable MFA for the entire company. The MFA code will be sent via their phone or email. Please note that MFA is bypassed if SSO is enabled.                                                            |
| Single sign-on (SSO)        | Configure SAMLv2-based SSO to enable users to access the Asset Hub using SSO via an Identity Provider (IdP). You will still need to create the users in Scaleflex DAM before they will be able to login via SSO. |

### SSO

{% hint style="info" %}
Configure SSO so that users can log in with their corporate credentials (such as Active Directory, Okta, or Azure AD / Entra ID) into Scaleflex DAM.

An Identity Provider supporting SAMLv2 is required.
{% endhint %}

To configure SAMLv2-based SSO, click on the **Add SSO connection** button. Any Identity Provider supporting the SAMLv2 protocol is supported.



{% tabs %}
{% tab title="Step 1" %}
<figure><img src="https://2536208400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqsq2dR7Fjagf5eTifWZx%2Fuploads%2FcKeaiYknDY5ePKHZGWCK%2Fimage.png?alt=media&#x26;token=c5b281e4-74fd-4523-a7a5-fb123b7a7457" alt="" width="375"><figcaption><p>You can copy the ACS URL and EntityID or download the SP metadata XML</p></figcaption></figure>
{% endtab %}

{% tab title="Step 2" %}
<figure><img src="https://2536208400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqsq2dR7Fjagf5eTifWZx%2Fuploads%2FbfdVIZcn2DN177kqro0Q%2Fimage.png?alt=media&#x26;token=78744177-ce72-4e23-836a-ae6712a2377d" alt="" width="375"><figcaption><p>Enter the SSO application details from your IDP in the corresponding fields</p></figcaption></figure>
{% endtab %}

{% tab title="Step 3" %}
<figure><img src="https://2536208400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqsq2dR7Fjagf5eTifWZx%2Fuploads%2FAtDw1oPdRJ3hjN0oPW0I%2Fimage.png?alt=media&#x26;token=983fb79e-7a4d-4347-97c7-af9e66320f7d" alt="" width="375"><figcaption><p>Enter the email domain which will trigger the SSO process</p></figcaption></figure>
{% endtab %}
{% endtabs %}

After saving the SSO connection, every user attempting to log in with an email address from the domain configured in Step 3 will be redirected to the configured Identity Provider and automatically logged into the Asset Hub if an active SAMLv2 session is enabled.

#### Terms and conditions (T & Cs) <a href="#terms-and-conditions-ts-and-cs" id="terms-and-conditions-ts-and-cs"></a>

| Setting                                                        | Description                                                                                                                                                                                                |
| -------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Prompt new users to accept the company's T & Cs on first login | Enable or disable the requirement for users to accept the customizable T\&Cs upon first login                                                                                                              |
| T & Cs text                                                    | The custom text or HTML to display to users on their first login. Supports multiple languages.                                                                                                             |
| Force all users to accept the new T & Cs                       | Modifying the content of the Ts & Cs will create a new version. Enabling this setting will force users who have already accepted the previous version to accept the updated version upon their next login. |
