Enterprise SSO Flexibility & Powerful User Management Tools

🚀 New Features

• Connect Multiple Identity Providers Simultaneously: Configure and manage multiple SAML providers (Okta, Azure AD, Google Workspace) side-by-side with unique URLs for each—giving employees seamless login options while maintaining centralized control. Set up in Admin > SSO Configurations.

• Customize SSO Attribute Mapping for Any Provider: Define custom field mappings between your identity provider and MangoOps user profiles—ensuring employee data flows correctly regardless of how your IdP names its attributes. Now supports organizational info, contact details, location data, and profile photos from Google Workspace, Okta, and Azure AD.

• Reset Passwords for Multiple Users at Once: Select any number of users and update their passwords in a single action with confirmation safeguards—turning a task that could take hours into seconds when onboarding new teams or responding to security incidents. Available in Admin > Users with enhanced bulk action controls.

• Enhanced User Management with Smart Filters: Filter users by active, inactive, or pending status—making it effortless to audit user access, identify inactive accounts, and maintain security compliance across your organization.

• Channel-Aware SSO for Web and Mobile: Configure which SSO providers work for web login, mobile apps, or both—ensuring users always see relevant authentication options on every platform without confusion.

• Internal Employee ID System for Robust Data Integrity: Every user now receives a unique MangoOps employee ID that persists across all system operations—preventing data conflicts when external employee IDs change and ensuring reliable reporting even during organizational transitions.

🔧 Improvements

• Subdomain-Based SSO for Clean, Professional URLs: SSO authentication now automatically determines your organization from the subdomain—eliminating messy query parameters and giving employees a branded, professional login experience that reinforces trust.

• Remember Your Filter Preferences: Issue report filters now persist across sessions—saving support managers from re-applying the same filters every time they check their queue, which adds up to significant time savings over weeks and months.

• Quick Access to Settings from Anywhere: Settings Hub link now appears in the main navigation bar—reducing clicks to reach critical configurations and improving admin productivity throughout the day.

• Intelligent User Name Fallback: When SSO doesn't provide first/last name, the system now intelligently extracts names from email addresses—ensuring every user has a readable display name instead of blank fields that confuse teammates.

• Expanded Google Workspace Integration: Comprehensive support for Google Workspace SAML attributes including department, job title, office location, manager, and profile photos—automatically populating rich user profiles without manual data entry.

• Prevent Sitemap Duplicates: Site link creation now checks for existing paths and handles name conflicts intelligently—maintaining clean site structure and preventing broken navigation links.

• Enhanced Bulk Action Safety: All bulk user operations now include explicit confirmation modals with action summaries—preventing accidental changes that could lock out employees or cause access issues.

🐛 Bug Fixes

• Reliable SSO Across Load Balancers: Improved SAML configuration resolution to work consistently across distributed infrastructure—eliminating intermittent login failures that frustrated users during peak times.

• Accurate SSO Employee ID Extraction: Fixed employee ID extraction after database schema updates—ensuring user records link correctly to HR systems and payroll integrations.

• Robust SAML Request Handling: Enhanced SAML request decompression and decoding to handle various provider formats—reducing SSO setup failures and support tickets from "login not working" issues.

• Better IdP Slug Detection: Improved SAML identity provider identification logic—ensuring multi-IdP environments route authentication requests to the correct provider every time.

🎯 What This Means for You

• True Enterprise SSO Flexibility: With multi-IdP support and custom attribute mapping, you can integrate with any enterprise identity provider exactly how you need—no more compromising on authentication strategy or maintaining workarounds. Organizations with acquisitions or complex IT environments can now unify access control without forcing a single SSO standard.

• Massive Time Savings on User Management: Bulk password changes and persistent filters transform user administration from a tedious, error-prone process into quick, confident actions—potentially saving IT admins 10-15 hours per month on routine user maintenance.

• Data Integrity You Can Trust: The new internal employee ID system eliminates a major source of data corruption and reporting errors—giving you confidence that time tracking, scheduling, and payroll data remains accurate even when employees change departments, locations, or external ID numbers.

• Professional, Branded Authentication: Clean subdomain-based SSO URLs and channel-aware provider selection make your authentication experience feel polished and purposeful—increasing user confidence and reducing "is this legitimate?" concerns that lead to support calls.

• Faster SSO Deployments: With expanded attribute mapping and better provider compatibility, SSO integrations that used to take weeks of back-and-forth troubleshooting now work on the first try—accelerating enterprise deployments and reducing professional services costs.