Frequently asked questions (FAQ)
This article answers common questions about Opti ID's features, functionality, and how Opti ID impacts your Optimizely experience. Refer to these questions and answers to quickly find the information you need.
Opti ID and authentication
What is Opti ID?
Opti ID unifies Optimizely's access and authorization across its products. It provides a single entry point to log in, navigate between entitled products, and manage users and their entitlements through the Admin Center.
With Opti ID, you can:
- Log in using centralized authentication with single sign-on (SSO) supporting any SAML or OIDC identity provider, SCIM, local login, and multi-factor authentication (MFA).
- Switch between Optimizely applications without re-authentication.
- Centrally manage user roles and create custom permissions in the Admin Center.
- Access simulation and administrative features in the Admin Center.
- View account and user dashboards, including usage and billing data.
Why is Opti ID important?
Opti ID provides a seamless login experience across Optimizely products without re-authentication. It also unlocks the following key capabilities:
- Switch between accounts and products.
- Centrally manage product permissions through the Admin Center, including configuration for users, accounts, entitlements, reporting, and insights.
- Access to Optimizely Opal, Optimizely Connect Platform (OCP), Optimizely Reporting, and the Optimizely App Directory.
Opti ID makes all Optimizely products accessible as part of a cohesive suite from a single location, whether you use one product or the entire suite.
Is there a cost for Opti ID?
Optimizely provides Opti ID as a complimentary foundational service. Existing users must migrate their organizations to Opti ID, and Optimizely provides net-new users with Opti ID by default.
What identity providers (IdPs) does Opti ID support?
Opti ID supports
- Any SAML or OIDC IdP, including but not limited to Duo, Entra ID, Google, Okta, OneLogin, and PingOneDuo, Entra ID, Google, Okta, OneLogin, and PingOne.
- SCIM provisioningSCIM provisioning.
- Local login.
What authentication protocols does Opti ID support?
Opti ID supports both SAML and OIDC for connections with your identity provider (IdP). Opti ID requires a new single sign-on (SSO) connection. You cannot reuse your existing SSO configuration.
Is multi-factor authentication (MFA) supported?
Yes. You can enable MFA for added security.
Is local login supported?
Yes. Non-single sign-on (SSO) users can log in as a local user using email and password. Optimizely enables this by default. You do not need to request it.
Is SCIM supported?
Yes. You can provision and sync users with SCIMprovision and sync users with SCIM. You can also generate SCIM tokens yourself.
Note
Optimizely officially supports SCIM provisioning with Entra ID, Okta, and PingOne. Other IdPs are not officially supported for SCIM provisioning, and Optimizely does not assist with custom configuration or troubleshooting.
Do I need to log in again to access a different Optimizely product?
No. The main benefit of Opti ID is single login access to all your entitled products. You only need to sign in again after your session expires (Okta-controlled timeout).
Can I still use my application's login screen?
Yes. Until your organization migrates fully to Opti ID, you can continue logging in directly at the application level. Without Opti ID, Optimizely requires reauthentication between applications, and the product switcher is not available.
What happens after I log in to Opti ID through login.optimizely.com?
All users go to home.optimizely.com after authentication, unless you have access to only one application instance, in which case Opti ID redirects you directly to your instance.
What does an administrator see when they log in?
Administrators go to home.optimizely.com when they log in, where they see the global navigation bar with the product drop-down list that displays all purchased products and instances. The products in the global navigation bar also display as product tiles on the home dashboard.
The Admin Center displays as one of the available products (both in the product drop-down list and as a product tile). They can access the Admin Center to manage users, roles, and entitlements.
What does a non-administrator see when they log in?
Non-administrators go to home.optimizely.com when they log in, where they see the global navigation bar with the product drop-down list that displays only the products and instances to which they have access. The products in the global navigation bar also display as product tiles on the home dashboard.
Can I log in directly from my Optimizely application?
Yes. All Optimizely products include a login page with a single sign-on (SSO) link that redirects automatically to Opti ID.
Is Opti ID mandatory?
Yes, Opti ID is mandatory for net-new organizations. Optimizely encourages existing organizations to migrate as soon as possible. The goal is for all organizations to use Opti ID to get the full benefits of Optimizely.
Does Opti ID support branded login pages?
Yes. You can customize the login page to match your branding.
Why do I need to change my password?
You must change your password when switching to Opti ID for the following reasons:
- It is a standard security practice when changing your authentication provider.
- Optimizely does not retain passwords to protect your personally identifiable information (PII).
Product switcher and authorization
If I manage multiple organizations, how do I navigate between them?
The global navigation bar includes all the organizations you manage. You can switch between accounts seamlessly without needing to log in again.
Why are all my products not listed in the product drop-down list?
Only products that have migrated to Opti ID are available in the product drop-down list. If you believe you should have access to other products, contact your administrator to add you to the appropriate group with the correct permissions.
Why can I not see all the Optimizely products my organization has?
You only see products you are entitled to use. If you need access to other products, contact your administrator.
Are HMAC requests supported, for example, for permissions?
Yes. Opti ID uses HMAC to determine instance permissions for users in the context of Optimizely Content Marketing Platform (CMP).
Admin Center
What is the Admin Center?
The Admin Center is the central place where administrators manage their organization in Opti ID. Here, administrators can
- View and manage all entitlements.
- Manage users and their product roles and permissions.
- Create custom roles specific to their organization.
The Admin Center continues to expand, adding reporting tools and self-service capabilities, like trials and freemiums.
Who has access to the Admin Center?
The technical contact for your organization is the primary administrator for the organization. This user
- Is the first official user in Opti ID with Admin Center access.
- Can manage account settings, users, and entitlements.
- Can invite additional users and assign them roles, including administrator roles for specific products or across the account.
How do I get support for the Admin Center?
The Optimizely Customer Success Manager (CSM), Support, and Enablement teams provide support for Opti ID use and migration.
User management
Can an organization self-serve requests for Opti ID access?
Yes. Administrators can invite users directly through the Admin Center. The invitation workflow also lets administrators track who has accepted their access.
Do I still need to log in to the Azure portal to manage users?
No. Once your organization uses Opti ID, the Admin Center centralizes user management.
Can I maintain users in the Admin Center?
Yes. The Admin Center is the single location for managing all users for organizations using Opti ID. As your organization moves to Opti ID, you can no longer manage users and permissions in individual applications.
Can I manage users in Azure AD and sync them with the Admin Center?
Yes. You can integrate Azure AD with Opti ID to automatically sync users and groups. See Configure organizational domains and SCIM provisioningSCIM provisioning.
Do I have to manually add each user to the Admin Center?
No. You can migrate users automatically with Just-In-Time (JIT) migration or SCIM provisioning. To invite a group of users at once, upload a comma-separated values (CSV) file on the Users page. See Configure organizational domains, SCIM provisioningSCIM provisioning, and Invite users in bulk.
What are user groups?
Groups let you organize users with similar roles or entitlements, reflecting your internal teams or structure. For example
- Groups that match Azure AD configurations.
- Product-specific groups.
- Role-based groups like editors, approvers, and publishers.
By default, every account includes two groups, Everyone and Administrators.
Why are user groups important?
Groups provide flexibility for managing users, roles, and entitlements. You can apply permissions at the group level, and any changes automatically apply to all users in the group.
If a user has multiple roles within a product, how do I manage these?
Users can have multiple roles through group membership. A user can belong to multiple groups, each granting different roles and access to different product instances.
How do users get access to Opti ID?
The organization's technical contact or administrator creates groups and adds users with the appropriate entitlements. Users receive an email notification to accept their access and create a password.
How do you know you should log in to Opti ID instead of your previous application?
Once you accept your Opti ID invitation and set a password, you log in through Opti ID. You see the global navigation bar with the product drop-down list. Logging in with your old application credentials redirects you to https://login.optimizely.com. You should update any bookmarked URLs accordingly to avoid redirects.
Can I change the instance name that displays in the product drop-down list?
Yes. Admins can update instance names in the Admin Center.
If I upload users with Just-in-Time (JIT), what do I need to do?
The technical contact only needs to notify users to log in at https://login.optimizely.com. If Admin Center groups mirror your organization’s internal groups, you can automatically sync users to the correct groups, roles, and instances using your identity provider (IdP), like Entra ID, Okta, or PingOne.
How is a user account assigned to the correct groups and roles?
When users log in, their organization's identity provider (IdP) tells Opti ID which internal groups they belong to. Opti ID then automatically maps these internal groups to the corresponding groups and roles in the Admin Center, so users are assigned the correct permissions without extra configuration.
You must log in at https://login.optimizely.com.
Do I need to manage roles and permissions in my Optimizely application?
It depends on whether your organization has migrated to Opti ID.
- Migrated to Opti ID – Manage roles and permissions centrally in the Admin Center.
- Not yet migrated to Opti ID – Manage roles and permissions within your individual Optimizely application. See your product's user documentation.
Additional information.
- Optimizely prepackages system roles, and you cannot edit them. These roles provide a foundation for building your entitlements.
- You can create custom roles in the Admin Center to tailor permissions for your team.