New article
Recently updated
Get ready for your new command centre for Ideagen EHS Core (SSO login)
Who is this article for?
Administrators planning to implement Ideagen Hub, including organisations with a mix of SSO and standard login users.
No special access or permissions are required.
This page contains all the information you need to successfully unlock your Ideagen Hub command centre for Ideagen EHS (Core). Your gateway to breakthrough performance, unifying every solution and support in one place, unleashing predictive AI that thinks ahead and runs on infrastructure so secure and fast, it redefines excellence.
Here you'll find guidance on how to ensure your transition runs smoothly and all the answers to questions you might have.
To guarantee success, it's really important you familiarise yourself with the key elements:
- We have pre-scheduled migration dates available — we are prioritising migrations before the end of April. Submitting your SSO Information form immediately is the fastest way to secure your date.
- Your organisation uses SSO. Before your migration date, Ideagen will set up your Hub tenant and provide your IT team with the SSO setup details they need to configure the connection. This configuration must be completed before your migration date.
- Once migration is complete, SSO users will receive a welcome email with their Hub URL and instructions to log in with their existing corporate credentials. No password reset required.
- If some of your users log in with a username and password, those users will receive a separate welcome email from app@hub.ideagen.com with a link to set their password — this is a legitimate email from Ideagen, not a phishing attempt.
✅ Pre-migration checklist
Before your go-live date, complete these steps to set your team up for a smooth migration.
- Submit the SSO Information form — do this now: We have pre-scheduled migration dates ready to assign and are prioritising the end of April. Complete this form immediately and ensure your IT team has the migration date confirmed in their diary. Your migration cannot proceed until this form is received. It captures your IT contact details, Identity Provider (IdP), and SSO configuration information so our team can prepare your Hub tenant.
- IT team: configure your SSO connection before migration day: Before your migration date, Ideagen will set up your Hub tenant and provide your IT team with the SSO setup details they need to configure the connection. This must be completed before your migration date. Full step-by-step instructions are available in our SSO SAML Setup Guide on Luminate.
-
Confirm email addresses are in place: In EHS Core, check that every active user's HR Profile includes a valid email address in the Email field. This is essential for all users — without a valid email address, a user's account will not be migrated to Hub. SSO users authenticate via their email address, and standard login users need one to receive their welcome email.
- If you have a large number of users who need email addresses added, our Support Team can help. Reach out through Luminate and they'll provide a template for you to complete — once returned, they can import the updated email addresses on your behalf.
- Please note: mobile app users cannot update their own email address through the app. You will need to update it for them through the admin interface, or ask them to log in via the web version to update it themselves.
- Ask your IT team to whitelist app@hub.ideagen.com: Emails relating to your migration will come from app@hub.ideagen.com — this is a legitimate address from Ideagen. Please make sure your IT team whitelists it before your migration date to ensure emails are not blocked or flagged as spam. This applies to both IT configuration instructions for SSO and welcome emails for standard login users. Note that your IT team may not be users in Ideagen EHS (Core), so please make sure this reaches them directly.
- Tidy up your user list: Review your current users in EHS Core and archive or delete anyone who no longer needs access. A clean user list now means a smoother migration and less to manage on the other side.
- Notify your team: Let your staff know about the upcoming login change before your migration date. We've put together a ready-made email template to make this easy — find it here.
What changes
- SSO users — seamless login from migration day: There is no downtime during migration — the system stays available throughout. Once migration is complete and your IT team has configured the SSO connection before migration day, SSO users will receive a welcome email with their Hub URL and SSO provider name. Simply go to the URL and log in with your existing corporate credentials. No password reset required.
- Standard login users — password reset required: The first time a standard login user accesses Ideagen Hub, they will need to set a new password. Each user will receive a welcome email from app@hub.ideagen.com with a link to do this. If a user doesn't receive their welcome email, they can select Forgot Your Password on the login screen to have it resent.
-
Ideagen EHS mobile app: After migration, all users should open the app and tap Log in with SSO / Ideagen Hub to access their account.
- SSO users: sign in using your existing corporate credentials as normal.
- Standard login users: use the password set via your welcome email. If you haven't set it yet, tap Log in with SSO / Ideagen Hub and select Forgot Your Password from there.
- New users: These will now be added through Ideagen Hub
- Unified access: One login connects you to all your Ideagen products and Luminate support
- Enhanced performance: Built on our most secure and modern architecture yet
What stays the same
- Your login experience: SSO users will access Ideagen EHS through Ideagen Hub using their existing corporate credentials. Standard login users will access it using their new Hub password.
- Your product interface: Ideagen EHS looks and works exactly as it does today
- Your data and workflows: Everything remains intact with zero data loss
- Your permissions and roles: All user accounts and access levels are unaffected
- Induction users: can still access Ideagen EHS through the public-facing induction page
✅ Post-migration checklist
Because your IT team has already configured SSO before migration day, there is very little to do once migration is complete.
- Send welcome emails to standard login users: If you have users who log in with a username and password, log in to the Hub Admin Console and send welcome emails to those users. Each user will receive an email from app@hub.ideagen.com with a link to set their password and get in. Full instructions are in the Hub migration guide.
- Allow up to 5 minutes: After a standard login user completes their password setup, allow a few minutes before they attempt to log in — then they're good to go.
- Communicate the go-live to your team: Let your team know they can now access Ideagen EHS (Core) through Ideagen Hub. SSO users should check their inbox for their welcome email with login instructions. All mobile app users should tap Log in with SSO / Ideagen Hub on the updated login screen.
- Users without email addresses at migration: Any user who didn't have a valid email address in their HR Profile at the time of migration will not be automatically migrated to Hub. You can resolve this directly in Hub — navigate to the Admin Console, add them as a new user, and make sure the username you enter is identical to their username in Ideagen EHS (Core). Once it matches, the user will be able to log in and access their account as normal.
Once you're in, we encourage you to have a click around — it's intuitive and straightforward, and will all make sense quickly.