|
This topic refers to functionality that is only available to accounts on the Business-level or above plans. If you do not see the functionality described here, either your account or realm has not been configured to show it, or your account is not on one of those plans. |
Shared responsibility and the cloud
Quickbase is a cloud service, technically known as an Application Platform as a Service (aPaaS). As a cloud service, Quickbase ensures the security and availability of the Quickbase platform while you (as the customer) are responsible for managing users, apps, and data in your Quickbase realm. A Quickbase realm is a logical slice of Quickbase dedicated to your organization that you control. Realms are defined using a DNS sub-domain with the format: https://customername.quickbase.com.
Roles and responsibilities of a Quickbase realm admin
As a Quickbase realm admin—that is, a user assigned to the Realm Admin role—you are responsible for setting up and maintaining your Quickbase realm, which includes user and data governance and setting security controls in line with your company’s requirements.
Realm admins:
- Realm authentication
- Manage user accounts and roles
- Configure realm security settings
- Protect data
- Improve visibility
Define realm authentication
Organizations may choose to use Quickbase independently of federation, in which case users and groups are solely managed within Quickbase, or customers may enable federated user authentication to their Quickbase realm using Security Assertion Markup Language (SAML) version 2.0.
SAML is an is an open XML-based framework used to exchange authentication and authorization data between an identity provider (IdP) and a service provider (SP) such as Quickbase.
As a single-sign on (SSO) method, SAML enables users to access and log in to multiple websites using one set of credentials. SAML is the link between the authentication of a user’s identity and the authorization to use a service.
Best Practice: Quickbase recommends using SAML for authentication.
As a single-sign on (SSO) method, SAML enables users to access and log in to multiple websites using one set of credentials. For example, when a user leaves your organization, disabling that user from your Active Directory also automatically removes access to any service which that identity is associated through SAML, such as Quickbase. Additionally, when using SAML, organizations can maintain consistent security controls such as password complexity or two-factor authentication across their IT assets and service providers.
For more details about SAML and Quickbase, click here.