Unified Authentication Via Account Manager

When you migrate to unified authentication, your users can log in to their Business Manager instances through Account Manager. Unified authentication streamlines the login process by providing users with a single set of login credentials to access all Business Manager instances. Once a user links their Business Manager and Account Manager profiles, they can use Account Manager to log in to other accounts, such as WebDav, Studio, and OCAPI. As a result, your users have fewer credentials to remember. Unified login also increases security because you can use the two-factor authentication already supported on Account Manager accounts. Unified authentication simplifies user management by making Account Manager the one stop shop for creating and deleting users.

Note: You still manage permissions and preferences for users through Business Manager, including all users migrated to or created in Account Manager.

Migrating users to Unified Authentication has five stages to prepare users for the change and minimize disruption. You don't need to use every stage. You can skip Unified Authentication Encouraged and go straight to Unified Authentication Mandatory. However, we recommend that you use every stage to avoid business disruption.

Unified Authentication Best Practices

For increased security and ease of use, start your migration as soon as you can. Set a schedule for each stage.

Back up all users from the instance.

If a user has multiple Business Manager accounts with the same email, only one can be migrated. We recommend that they choose the account with the highest level of permissions.

Once you activate stage five, clean up accounts that have not yet migrated. Consider deleting accounts belonging to inactive users or accounts that belong to users with multiple accounts who already migrated a different account. In Business Manager, select Administrator > Global Preferences > Security and in the User Authentication tab, select Number of Users Not Yet Using Unified Authentication. Delete accounts by selecting the account and clicking Delete.

Inform your users before enabling Unified Authentication Encouraged so that they understand the benefits of switching. We provide an email template that you can use:


    We are moving to unified login via Account Manager. Unified login lets you log in
    to all Business Manager instances using your Account Manager login credentials.
    
    This change lets us unify login credentials across all instances, making logging in to
    Business Manager easier. Additionally, because Account Manager uses two-factor
    authentication, this adds a new level of security.
    
    Starting on xx.xx.xxxx, we will provide the option to link your Business Manager login
    credentials with your Account Manager account. On xx.xx.xxxx, the migration will become
    mandatory. Please link your accounts as soon as possible.
    
    If you have multiple accounts, link the account with the highlest level of permissions,
    because only one can be used going forward.
    
    Thank you,