Thredd Portal overview

Thredd Portal is the main entry point to Thredd services and is the main component that is related to the API Hub; before you can use the API Hub, your organisation must be set up on Thredd Portal and Thredd Secure Framework. These combine several components that enable secure access to Thredd’s resources, using a common identity store.

Thredd Portal provides a number of features, including:

  • Organisation and application management — Manage access for your organisation's applications, edit/add SSO details, and manage EHI certificates.

  • User management — Invite users to onboard to Thredd and manage user roles, permissions, and access, including the option to suspend and activate users.

  • Cards and transaction management, and other related functionality — for users with the appropriate roles.

You can learn more about the cards and transaction management features of Thredd Portal in Thredd Portal Guide: Getting Started.

Identity and Access Management

Thredd Portal provides identity and access management functionality at an organisation, application, and user level. Thredd Portal functions as a Confidential Client, where Thredd's own application infrastructure undertakes authentication and authorisation activity on behalf of the user.

When a user is registered and has logged in to Thredd Portal, they can access other Thredd services. Thredd Portal also operates behind-the-scenes as an authentication server, enabling a single sign-on journey and access to Thredd's REST APIs.

Thredd Portal also provides access to Thredd's Certificate Authority for setting up and managing certificates to connect to Thredd services, including the REST APIs via API Hub.

To learn more, see Thredd Secure Framework.

Connecting to Thredd Portal

Thredd Portal provides support for multiple roles, with Admin access available to an Organisation Admin. An Organisation Admin user can set up and manage the settings for your organisation's applications, certificates, SSO configuration, and users through Thredd Portal.

This guidance focuses on the initial set up by a user with the Organisation Admin role in Thredd Portal.

You can choose one of the following methods for users to log in to Thredd services:

  • Single Sign-On (SSO) — this involves adding an SSO configuration for SAML or OIDC in Thredd Portal and inviting users via your identity provider. This is not required, but Thredd recommends it to help automate user onboarding and management.

  • Email address and password — this involves manually adding details for each user in Thredd Portal and sending an invite using its built-in invitation feature.

About Single Sign-On access (optional)

Thredd's Secure Framework allows you to optionally set up SSO, using SAML (Security Assertion Markup Language) or OIDC (OpenID Connect), to access Thredd services, for example Thredd Portal. This not mandatory but Thredd recommends that your users log in using SSO instead of using a password because it offers the following benefits:

  • An enhanced user experience for users as it removes the hassle of remembering passwords.

  • Companies to save time on maintenance.

  • Reductions in overheads when managing accounts.

  • Enables you to automate user onboarding, where your users can visit the Thredd Portal URL and automatically create their account upon their first successful login.

This enables a Single Sign-On journey by linking your IdP with Thredd's own provision. If you do not use an IdP, Thredd can act as the IdP.

This Single Sign-On journey is involved with:

  • Accessing the organisation and user management features of Thredd Portal for Organisation Admin users, such as creating certificates with Thredd's CA, and the user management functionality to set up access for other users.

  • Accessing the card and transaction management features of Thredd Portal.

  • Managing access behind-the-scenes to the REST API.

Setting up access to Thredd Portal for the first time

An Organisation Admin user at your organisation must first register and log in to Thredd Portal before other users within your organisation can access Thredd Portal and other services.

You can begin this process when Thredd has registered your organisation and your Organisation Admin user, and has sent an email inviting them to log in to Thredd Portal.

The set up guidance outlines the full process of setting up the Organisation Admin for the first time and setting up additional users. However, an Organisation Admin does not have to invite/add users to register with Thredd Portal straight away. Instead, the Admin can choose to add the organisation's SSO details (if using SSO), create Client certificates, and test access to Thredd REST APIs and API Hub first. An Organisation Admin can later return to this step to set up the SSO or password-based access for the organisation's users.

Set up guides

To learn more about setting up access for your organisation, applications and users in Thredd Portal, see:

If your organisation will use Single Sign-On to access Thredd services, the following guides will help you to configure your SSO provider: