---
title: ExtensibleSSOPlatformSSO_AuthorizationObject
framework: devicemanagement
role: symbol
role_heading: Object
path: devicemanagement/extensiblessoplatformsso_authorizationobject
---

# ExtensibleSSOPlatformSSO_AuthorizationObject

Settings for authorization prompts and group management.

## Declaration

```data
object ExtensibleSSOPlatformSSO_AuthorizationObject
```

## Properties

AdditionalGroups: The list of created groups that don’t have administrator access. AdministratorGroups: The list of groups to use for administrator access. The system requests membership during authentication. AuthorizationGroups: The pairing of Authorization Rights to group names. When using this, the system updates the Authorization Right to use the group. EnableIdentityProviderAccounts: Enables using identity provider accounts at authorization prompts. Requires that UseSharedDeviceKeys is true. The system assigns groups using AdministratorGroups, AdditionalGroups, or AuthorizationGroups. UserAuthorizationMode: The permission to apply to an account each time the user authenticates. Allowed values: Standard: The account is a standard user. Admin: The system adds the account to the local administrators group. Groups: The system assigns group to the account using AdministratorGroups, AdditionalGroups, or AuthorizationGroups.

## Topics

### Objects

- [ExtensibleSSOPlatformSSO_Authorization_AuthorizationGroupsObject](devicemanagement/extensiblessoplatformsso_authorization_authorizationgroupsobject.md)

## See Also

### Objects

- [ExtensibleSSOPlatformSSO_AccessKeyObject](devicemanagement/extensiblessoplatformsso_accesskeyobject.md)
- [ExtensibleSSOPlatformSSO_AccountObject](devicemanagement/extensiblessoplatformsso_accountobject.md)
- [ExtensibleSSOPlatformSSO_PoliciesObject](devicemanagement/extensiblessoplatformsso_policiesobject.md)
- [ExtensibleSSOPlatformSSO_UserCreationObject](devicemanagement/extensiblessoplatformsso_usercreationobject.md)
- [ExtensibleSSOPlatformSSO_WebAuthenticationObject](devicemanagement/extensiblessoplatformsso_webauthenticationobject.md)