Trusted accounts let administrators create a trusted relationship between separate Ziflow accounts. This allows trusted users to be added more easily to reviews.

A trusted relationship does not give trusted users access to another Ziflow account. The only way for a user to access an account is to be added as a licensed users to that account. Trusted accounts synchronize user information (either one way or both ways) and simplify authentication for users.

Available for Ziflow administrators on: Enterprise

Trusted accounts enable:

• Trusted users: Users from the trusted account are synchronized to your account, so you can add them to proofs. Trusted users can be selected to review proofs, but they are not added as licensed users to your account and cannot access your account. When added to proofs, trusted users are able to access proofs from their own account dashboard.
• Controlled proof sharing: Administrators can limit proof sharing to users in their own account and trusted accounts, helping ensure proofs are shared only with approved users and domains.
• Authentication: Administrators and users can switch between Single Sign-On (SSO)–enabled accounts without re-authenticating each time. This also applies to two-factor authentication (2FA) and trusted device setups.

Requirements:

• Trusted accounts require at least two separate Ziflow accounts. You cannot create a trusted relationship within a single account.
• Trusted relationships can be established between accounts that use different email domains, as long as the required trust IDs are exchanged.
• Trusted accounts must be hosted in the same regional data center. For example, you can create trusted relationships between two US accounts or two EU accounts, but not between a US account and an EU account. For more information, see Understand the EU data center and regional separation.

Before you begin

Before configuring trusted accounts:

• Both accounts must be hosted in the same regional data center (US or EU).
• You must be an administrator in the account.
• Users who need to access both account dashboards must be added as licensed users in each account.

Open Trusted accounts

To open, go to Settings > Security > Trusted Accounts

 

Your trust ID is at the top of the Trusted Accounts page. Share this ID with other Ziflow accounts to establish trust.
By sharing your trust ID, you allow another account to synchronize information about your active users as trusted users.

When another account adds your trust ID, your active users are automatically synced to their people list as trusted users.

Add a Trusted account

1. Select Add Account.
2. Enter the Trust ID of the account you want to trust.
   
   
   
   Ziflow confirms the connection and adds the account to your list.

Synchronization modes

Trusted account synchronization works in two ways:

• One-way trust: Users from your account are synced to all trusted accounts.
• Two-way trust: Both accounts exchange and update user lists automatically. To enable two-way trust, repeat the process in the other account (add your Trust ID to their Trusted Accounts list). Once mutual trust is established, both accounts stay synchronized.

To check your trust settings:

Look at the Trust relationship column for each trusted account.

We trust them = One-way trust
If We trust them is selected, their active users are added as trusted users in your account. 

We trust them and They trust us = Two-way trust
If They trust us is also selected, your active users are added as trusted users in their account.

Synchronizing users across more than one trusted account

If your account has We trust them enabled for more than one trusted account, it collects trusted account users from each of them. If They trust us is also enabled for those same accounts, everything your account has collected, including users it pulled in from its other trusted accounts, is shared back out to them.

This means two accounts can end up seeing each other's users even if they were never directly trusted with each other, as long as they're both trusted with the same third account in both directions.

There is currently no way to connect two accounts to a shared third account while keeping those two accounts isolated from each other's trusted account users, if the shared account has both We trust them and They trust us enabled for both connections. This is a known limitation. If you need this kind of isolation, consider using We trust them only (one-way) on the connections where inbound users aren't required, or contact Ziflow Support to discuss your setup before connecting more than two accounts.

Authentication behavior

When accounts are trusted, users who have access to both accounts can switch between them without signing in again. This also applies when 2FA is enabled.
For example, if your primary account doesn’t use 2FA but a secondary trusted account does, you won’t need to authenticate again with 2FA when switching.