If all of the licenses in your account are allocated, you’ll need to take a few extra steps to remove someone with a license and transfer their items ...
A System Admin for an Enterprise plan can configure security controls to manage how their users work in Smartsheet....
If you're on a Pro or Business plan, you can merge two (or more) plans into one.
If you are a System Admin on a Business or Enterprise plan, you can use the Account Administration window to control certain features for all Smartshe...
If you are a System Admin, you can control the level of profile detail that’s shown to people in your organization versus what’s shown to people outsi...
User Auto Provisioning (UAP) automates the process of adding users to an Enterprise account in Smartsheet....
There are multiple ways to create custom content to help your team get up to speed on using Smartsheet:
A welcome screen that displays a message to ...
Smartsheet recommends deactivation as the preferred means of removing a user from Smartsheet....
System Admins on Business or Enterprise accounts can use Admin Center to receive an Excel file with Login History via Email to view which users listed...
If you’re a Smartsheet System Admin (SysAdmin), you can manage how people in their account sign in to Smartsheet....
Quickly administer licenses to multiple users from a single window in Smartsheet—granting your users the ability to create sheets, reports, and dashbo...
Access detailed logs of the past six months of actions that have taken place across your organization with Event Reporting....
If your plan has not enabled UAP, EPM, SSO/SAML, or DI, unlicensed users on your account can start a free trial and buy their own plan....
Smartsheet Authentication allows users to sign in to Resource Management (RM) with their Smartsheet credentials....
By default, Smartsheet uses encryption to safeguard your data and help you maintain control over it....
Azure Active Directory
Leverage Azure Active Directory (Azure AD) to provision, deprovision, and manage the profile data of users in your Smartsheet account....
Azure AD has different sync times for provisioning depending on the sync configuration,
number of users and groups, and sync type (initial or increme...
You can use Azure for SSO with Smartsheet in two ways; both methods are effective....
Account Management
In addition to the default roles, the Okta integration supports additional Smartsheet Premium Connector....
Smartsheet supports Unlicensed users so you can provision Smartsheet users without any roles as well (more details below.)
Any new unlicensed user ...
In this step, you will configure Okta. You need admin permissions in Okta to complete this part of the configuration.
Log into the Okta Admin page....
Before you configure the integration, you must complete a few tasks in Smartsheet....
The Smartsheet - Okta SCIM Integration enables consistent enforcement of your organization’s security and compliance policies by centrally managing us...
The Free plan lets you quickly get started with task and project management.
You must first enroll in a 30-day trial....
Admin Center
Admin Center allows System Admins and Group Admins to administer and govern their Smartsheet account....
With Security & Controls, you can control permissions for global notifications and requests, group memberships, and account discovery....
With User Merge, you can update email addresses in bulk or merge two user accounts into one....
User Management features in the Admin Center allow you to add, edit and deactivate, users individually or in bulk....
With User Management features in the Admin Center, you can add and edit users individually or in bulk....
Group Admins of a Business Plan or Enterprise Plan can access Group Management in the Admin Center....
With the WorkApps Collaborator Pack Monthly Usage tile, you can view the WorkApps collaborator usage, and download a report that displays the list of ...
With a custom email domain, you can customize your account for all users to use your organization’s subdomain instead of the default Smartsheet domain...
A data retention policy controls how your organization saves data for compliance or regulatory reasons, as well as how it disposes of data once the da...
Plan Insights allows System Admins to see account metrics and usage data.
A sheet access report shows you a comprehensive list of who has access to your sheets....
Nondestructive ownership transfer (NDOT) allows you to transfer a workspace item to a user who isn’t an Admin in that workspace.
A data egress policy allows you to control how your organization restricts actions that enable data sharing outside your company....
If you have set up SAML as your authentication method in the main plan, you can define policies to assign users to the appropriate managed plan automa...
Use Enterprise Plan Manager (EPM) to set security and governance policies for all plans across your organization’s validated domains....
As your organization grows, you might find that different departments have independently rolled out Smartsheet to manage their work....
If you no longer want to use a custom email domain or you want to change that domain, you must first remove the custom domain....
SAML and Single Sign-on
With Security Assertion Markup Language (SAML) and single sign-on (SSO), you can extend your organization’s security preferences to an Enterprise-leve...
You’ll need to do the following:
Set up your organization’s Identity Provider (IdP) to communicate with Smartsheet....
Use this article as a reference for supported claims and SAML assertion examples....
As you set up SAML for your organization, you can use this as a resource if you have any configuration questions....
Here are some answers to common questions people may have when setting up, maintaining, or logging in to Smartsheet with a SAML-based Single Sign-On (...
When a security certificate is about to expire, your Smartsheet SAML configuration may become disabled....
Use the instructions in this article to identify potential issues in your SAML assertion. You will first need to capture your assertion....
During a SAML sign-in, the browser, the service provider (SP, also known as Smartsheet), and the identity provider (IdP, this might be Okta, Azure, On...
What's the best way to set up SAML and your identity provider (IdP)?...
You may be trying to decide if you should configure Microsoft Azure AD SSO or SAML SSO. This chart covers the differences....
Org account doesn't have SAML enabled
User is not attached to the org
Old login data
Email attribute in SAML assertion does not match an existing S...
FatalProfile Exception Errors are typically given during the authentication process (before it gets back to Smartsheet)....
Google SSO failed 403 "Error: app_not_enabled_for_user
After setting up SAML with Google as the IdP users receive the error message:
Cause
User...
SAML SSO error: opensaml::BindingException at (https://sso.smartsheet.com/Shibboleth.sso/SAML/POST) Request missing SAMLResponse or TARGET form parame...
The Smartsheet login screen (https://app.smartsheet.com) shows this error message: ERR_CONNECTION_CLOSED
The issue could be related to proxy settin...
Error states "The IdP metadata URL you provided cannot be used because it is pointing at a server with an untrusted SSL certificate....