Single Sign-On and Account Recovery Planning
Plan sign-in for a small organisation.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Plan single sign-on. Applications used: [APPLICATIONS]. Identity provider options: [IDENTITY_PROVIDERS]. Users: [USERS]. Support capacity: [SUPPORT_CAPACITY]. Compare benefits and risks, list which applications support it, define an enrolment plan, multi-factor settings, recovery processes if a user loses their device, and emergency access if the identity provider fails. Provide a rollout plan in waves and a communication plan. Return the plan, a recovery policy, a user guide outline and metrics: percentage of applications behind sign-on, with an example. Costs and features should be checked with vendors [VERIFY]. Add a worked recovery plan: if a user loses their phone, they contact the help desk, verify identity by an agreed method such as a video call with a manager, and a recovery code is issued after approval; the old device is removed and a new one enrolled. Add emergency access: two break-glass accounts outside the single sign-on system, stored securely and tested every quarter. Provide a rollout wave plan: pilot with five people, then the whole team, then the remaining applications.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.