Question
Premier Bankcard
US
Last activity: 21 Aug 2025 16:08 EDT
SSO login persona switch without admin rights inquiry
Is there a way that an individual can login to Pega with SSO enabled and switch their persona without being a admin? I ask becasue we have SSO setup in our NON-PROD environments and it is working correctly, but we have a group of individuals that will be testing each of our Pea NON-PROD environements and they will need to switch their persona's / roles within Pega so that they can test the appliocations using each persona and I was just wondering if that was possible without being an administrator of the Pega instance to do so. And what would the best options for a group of individuals to do that? If it is even possible?
ai4process ltd
GB
It depends on how your access groups and operator provisioning are set up.
Pega uses a Model Operator to to create an operator record when logging into Pega using SSO. So if your Model operator has multiple Access Groups configured, Pega has an option to switch applications in the same Access Groups.
If the operators are already created, you need to manually add respective Access Groups associated to each persona would enable users to switch applications within the portal
Premier Bankcard
US
@RaviChandraSo....here is another question. If there are users with local accounts to be able to login to our Pega Cloud environments does Pega have an MFA option built into the platform that would send them an MFA email or text? I ask because this changing access groups on the fly question stems from all users needing to have MFA setup and switch Access Groups on the fly. Just trying to get around not wanting to create service accounts for the many Access Groups / Personas. Jope that made sense. If not, I can go into more detail.
ai4process ltd
GB
Pega supports MFA via email or SMS using authentication services. https://docs.pega.com/bundle/platform/page/platform/security/configure-mfa-with-one-time-password.html