Expired session or stronger authentication
Retain a permitted work destination and reauthenticate. Recheck revisions and conditions before consequential actions on return.
TRUSTED FACTORYFLOW
GoPaperless SSO connects people to the right workspace.
Sign-in, organization/site context and business authority connect the FactoryFlow access journey.
One sign-in experience, work-specific authority.
-
01
Choose one of six workspaces.
-
02
GoPaperless SSO handles sessions/authentication in the provisioned environment.
-
03
Select organization/site where required; check membership, roles and entitlement.
-
04
Open the permitted workspace or deep link.
Authentication and verification follow purpose.
GoPaperless SSO is the ecosystem entry
Users enter through GoPaperless SSO. Configured authentication methods or identity sources, including VNeID SSO/ShareInfo where authorized, may support the journey. Results bind to organizational identities for access decisions.
FactoryFlow authorizes workspace, site and object access. ERP/MES and adapter service identities have separate scopes; technical accounts and secrets are system-managed. Deployment design records issuer/audience, clients, expiry and revocation.
Sessions change; work must return to the right context.
Identity without authority
Route requests to organization administrators for membership/role/site grants. Make account or organization switching explicit.
Invalid destination or maintenance
Validate allowlisted route keys and return to access guidance. Organizations or implementation teams provide service environments.
Sign-in architecture uses one consistent model.
GoPaperless SSO is the user-facing access experience and contract. WSO2, Keycloak or other IAM components belong to applicable implementation design; IdP/federation, token and gateway relationships require their corresponding design records.