Admin
Please visit our Celonis Process Management documentation websites:
In addition, you can refer to the Basic Administration in Process Designer course at Celonis Academy for further help setting up your Process Designer.
Accessing Celonis Process Manager Admin & Settings
Only users who have the application role “Administrator” in Celonis Process Management can access the admin settings. You will receive an invitation mail with the login credentials of an initial admin user with the provision of your environment.
The admin settings can be accessed from both Process Designer and Process Navigator.
To access the admin settings from Process Designer, log in with your credentials, and from the homepage, click the SSO configuration tile.
To access the admin settings from Process Navigator, log in with your credentials, and select Admin & Settings from the user dropdown.
Login configuration options
You can configure CPM to use either standard login (email address and password), Single Sign-On with SAML or ODIC.
Standard login
The standard login allows users to login with a combination of email-address and password, in case SSO has not been configured yet or is not available in general. Standard login can be deactivated.
If a single SSO provider has been configured, users trying to login will be redirected to their respective login provider.
CPM OIDC configuration settings
Field | Description |
|---|---|
Name | The login provider name. You can optionally display the login type as button text on the user login page (where enabled). |
Client ID | The unique identifier assigned to an application by the identity provider (IdP). |
Authority | The URL of the IdP. |
Enabled | Enables or disables the login provider. If disabled, the button will not display on the login page. |
Claim Mappings (optional):
| The expected claims sent by the identity provider (IdP) are:
If the IdP uses different claim types, remap them here. |
CPM SAML 2.0 configuration settings
Field | Description |
|---|---|
Name | The login provider name. You can optionally display the log in type as button text on the user login page (where enabled). |
Service provider | The URL assigned to the service provider in a SAML-based federation. |
Identity provider | The URL assigned to the identity provider in a SAML-based federation. |
Enabled | Enables or disables the login provider. If disabled, the button will not display on the login page. |
Metadata document (optional) | If the IdP URL does not serve the metadata document, configure a custom endpoint here. Alternatively, upload your own metadata document. Note If a metadata document is not served/uploaded and a custom endpoint is not configured, all login attempts will fail. |
Certificate (optional) | If message encryption is enabled by the identity provider, the certificate will be used for decryption. |
Claim Mappings (optional):
| The expected claims sent by the identity provider (IdP) are:
If the IdP uses different claim types, remap them here. |
CPM standard configuration settings
Field | Description |
|---|---|
Enabled | Enables or disables the standard login via username/password. Note Even if disabled, standard logins are always permitted. |
CPM connectivity configuration
If you want to import activities from the Celonis Platform, you must connect to at least one Celonis data pool first.
To connect to live data in the Celonis Platform, see Activating and configuring live data.
CPM connectivity configuration options
Field | Description |
|---|---|
Team URL | The URL of the Celonis instance. |
App Key | The application key used to access the Celonis instance. For more information, see Creating and granting permissions to application keys. |
Celonis Activity Import | The Celonis data pool identifier. For more information, see Creating and managing data pools. |