The following is a use case to describe the main federated security features in TotalAgility.

• All users to be authenticated with TotalAgility are managed by a cloud-based authentication provider that supports the SAML standard.

• The authentication provider has 10,000 users that need to use TotalAgility.

• These users belong to several different groups.

• On initial logon, each user is added to the Default Category, uses the Default Working Category, and is added to a Users group in TotalAgility.

• The user name for each user is automatically retrieved from the User.Username claim value.

• The name for each user is automatically retrieved from the User.FirstName claim value.

• The email address for each user is automatically retrieved from the User.email claim value.

• Each user is uniquely identified in TotalAgility based on the username.

• Each user has a claim called Groups that is multi-valued, containing all the groups that the user belongs to in the authentication provider.

• These groups are mapped to groups in TotalAgility as follows.

  Group in authentication provider	Group in TotalAgility
  Domain Admins	Administrators
  Contributors	Designers
  Sales Team	Sales
  Marketing Team	Marketing