Tenant security administrators can assign exception users in the Administration console. Exception users are users that can log in to Anaplan with either single sign-on (SSO) or basic authentication (email address and password).

Tenant administrators must first turn on the Limit exception user assignment to Administration only switch in Administration. Then tenant security administrators can assign exception users.

Tenant security administrators must first assign workspaces to an SSO connection. Then they can assign exception users to the workspaces.

SSO is implemented at the workspace level. To assign exception users to an SSO connection, you must add the users to workspaces assigned to the SSO connection.

To add and assign exception users to a workspace:

  1. Select Administration from the top-left navigation menu.
  2. Select Security > Single Sign-On.
  3. Select an SSO connection.
  4. Select the Exceptions tab in the right-side panel.
This image displays the Exceptions panel in the Single Sign-On page.
  1. Expand a workspace, and then select Add exception user.
  2. Select the exception users to add to this workspace, and then select Save.
This image shows how to assign exception users for a workspace assign to an SSO connection.

Note: As a best practice, we recommend that the assigned exception user logs out and logs back in for the changes to apply. Changes also take effect after five minutes of inactivity by the exception user. 

To unassign a user as an exception user, remove them from the workspace.

To remove an unassign exception user from a workspace:

  1. Select Administration from the top-left navigation menu.
  2. Select Security > Single Sign-On.
  3. Select an SSO connection.
  4. Select the Exceptions tab in the right-side panel.
  5. Expand a workspace and select the Remove icon next to the user.