Single Sign On (SSO) Access to the Field Operation App (FOA)
Overview
The Aqualus Water platform can be accessed via Single Sign On (SSO). This method is preferred by Taggle and provides high-level security and the ability for the council or water utility to control access access to the AW system.
The documentation at Single Sign On for Aqualus Water - Azure AD / Entra ID Setup and Implementation can now be used to implement SSO for Azure ID / Entra ID enabled businesses. It is recommended to use this functionality in conjunction with the Android version of the Field Operations App for security and ease of use.
|||
The information provided below is legacy instructions for the Application Password version of the SSO implementation. This method should only be used in the event that your business is unable to use the SSO method linked above.
Contents
- 1 Overview
- 2 Application Passwords
- 3 How do I use Application Passwords to access the FOA?
- 4 FAQs
- 4.1 I am an existing user and I have two buttons - 'Single Sign On' and 'Login'. Do I have to use the Application Password, or can I continue to use my normal login?
- 4.2 Can I use the SSO on the computer for the Staff Portal and the normal password on the FOA?
- 4.3 I have used SSO for login but want to change back to the standard username and password for the FOA. Can this be done?
Application Passwords
What is an Application Password?
After enabling two-factor authentication (2FA) or Single Sign On (SSO), you may run into issues if you use apps or other devices that don't support two-step verification.
If you have 2FA/SSO turned on and an app isn't prompting you to enter a security code when you sign in, you can sign in with an app password instead. An app password is a long, randomly generated password that you provide instead of your regular password when signing in to an app or device that doesn't support two-step verification.
Do I need to use an Application Password?
You only need to use or create an app password if your Aqualus Water platform has SSO turned on.
For Taggle customers using standard username/password logins or a domain-based login, you do NOT need to use an Application Password.
The Application Password is only required if you log in using the ‘Single Sign On’ button in the Staff Portal.
If you use a standard username/password combination, then you will use your Staff Portal password to log in to the FOA.
How do I use Application Passwords to access the FOA?
Connect FOA to instance
Please refer to Getting Started | Configuration Options Page and the rest of the FOA Configuration section to connect the device to the instance.
For this document, a testing environment was used for demonstration purposes.
Windows |
|
Android
|
|
iOS | TBC |
Obtain your Application Password
In the Staff Portal, select ‘My Profile’ from the Menu Bar and click on ‘Manage App Password’.
You will be presented with the 'Manage App Password' page.
From this page, you are able to view, copy, use and reset your App Password.
View and Copy your Application Password
By default, the App Password is obfuscated for security reasons. To View the App Password, click the ‘Show’ Button and the password will be revealed. To hide the App Password again, click the ‘Hide’ button.
To copy your App Password, click the ‘Show’ button as above, then right-click on the password and select copy. Alternatively, you can use CTRL-C.
Using your Application Password to log in to the Field Operations App
To use your App Password, you will need your username and App Password retrieved in the section above.
Your username, when using most standard SSO systems, will be your email address. It will be displayed in the blue bar in parenthesis after the words ‘Your App Password’:
Use your username and App Password in the Field Operations App to login.
Windows |
|
Android |
|
iOS | TBC |
Reset / Change your Application Password
In the event your App Password is not working or there are any other issues, you can change it at any time. Simply access the ‘Manage App Password’ page and click the ‘Reset’ button and a new App Password will be auto-generated for you.
The App Password will be changed every time you click the ‘Reset’ button. Once this new password is generated, the old one will no longer be viable.
Best Practices for Application Password Management
Where practical, the best method for logging in to the FOA would be to:
Log into the Staff Portal using SSO.
Access the Manage App Password Page.
Show, then Copy the App Password.
Paste the App Password into the password field in the FOA.
Log in.
FAQs
I am an existing user and I have two buttons - 'Single Sign On' and 'Login'. Do I have to use the Application Password, or can I continue to use my normal login?
If you are able to log in without using SSO (legacy), however your instance has been converted to allow SSO access, then you can log in using BOTH methods. The legacy username and password will continue to work, until or unless your IT disables the legacy login. Please see the FAQs below regarding what happens once SSO in enabled for a login.
Can I use the SSO on the computer for the Staff Portal and the normal password on the FOA?
No. Once you log in using SSO, the App Password must be used to log in to the FOA moving forward.
I have used SSO for login but want to change back to the standard username and password for the FOA. Can this be done?
For the current login, no. You will need to create a new login for that user (using an alias or plus email address) and then use that login for the FOA. Note that once you login in this new login with the SSO, the password will then also no longer work and you will require the App Password.