Frequently asked questions about single sign-on (SSO) for On-Road IoT and Unity MX.
Scope
Is SSO only for On-Road IoT, or will it cover the wider Unity platform (with VisionAI 360, In-Warehouse and other modules)?
The move to SSO covers On-Road IoT and Unity MX, including VisionAI 360.
Does SSO change what I can see or do in each platform?
No. SSO changes how you sign in, not what you have access to. Your access is still set by the roles and permissions in each platform.
Accounts
Will users have a single account across these platforms, or will we still need to create and link accounts separately?
Users will have one identity across the platforms.
- New On-Road users are created as Unity users.
- Existing users with a linked Unity MX account sign in with that account.
Do I need a separate Unity MX account for new On-Road users?
No. New On-Road users are created as Unity users, so one account covers both platforms.
Will existing users with a linked Unity MX account need a new password?
No new account is needed. They sign in with their existing Unity MX account.
Roles and permissions
Will SSO also manage roles, security groups and permissions, or will we still need to set those up manually, with SSO only handling authentication?
SSO handles only sign-in and MFA. Roles, security groups and permissions are still managed in the platform, as they are today.
Will MFA be part of the sign-in?
Yes. MFA is handled by SSO as part of sign-in.
Will our existing roles and permissions change when SSO goes live?
No. They stay in the platform and are managed the same way as today.
Rollout
Is SSO enabled for customers automatically?
No. Each customer sets it up in two steps:
- The customer configures an application in Azure / Entra ID using OpenID or SAML, following the steps in the SSO setup guide.
- The customer submits a service request to the IAM Platform (Auth) team.
Will users be signed out or see downtime during the update?
No. Users won't be signed in through SSO when the update runs, so there are no sessions to interrupt and no downtime is expected.
Who should customers contact if they have sign-in problems?
Users should contact their organization's administrator or Powerfleet Support.
RECOMMENDED READING