Hi there -
Like many customers, we use the Salesforce managed package version of Gainsight and therefore prefer everyone login to the system via Salesforce. This is because we have quite a few SFDC-sourced reports, global filters, etc. that are non-functional for users when logged in directly to NXT.
We used to require everyone login to Gainsight via Salesforce simply by not provisioning the Gainsight NXT Okta tile to end users. However, for business continuity reasons, we had no choice but to give all our end users that Gainsight NXT Okta tile when the SFDC outage hit last November.
So, Problem #1 is that as an Admin, I cannot control how our users login. My only recourse to “force” them to login via SFDC is to remove the Gainsight NXT Okta tile. I had been considering doing this, although I had been dragging my feet due to many of our end users having created workflows, bookmarks, tab groups, etc. that relied on that Gainsight NXT direct access.
Now, though, it seems that there is a Problem #2, which is related to the new Gainsight CS MCP. It seems (and please correct me if I’m wrong) that in order to set up the Gainsight MCP, our end users will need to have a way to login directly to Gainsight NXT (in our case via Okta). Which means I am now stuck allowing our users to have the option to login directly via NXT (we try to strongly encourage them to login via SFDC, but, well, they don’t always listen...).
I suppose my ask is to create more granular controls when it comes to logging in directly to NXT. For example, in the User Authentication section, we would have two toggle options:
- Allow users to connect Gainsight MCP
- Allow users to login directly to Gainsight NXT
In our case, we would allow the first and deny the second. Bonus points if we could reroute the failed direct NXT login to the login page for SFDC. Or at least customize an error message such as “Your organization has disabled Gainsight NXT direct access. Please login to Gainsight via Salesforce.” Thanks for considering this.