Procore for Government - Get Started for Administrators

Procore for Government is designed to meet stringent federal security and compliance standards. Unlike the standard commercial platform, this environment requires a more controlled onboarding process to ensure all access is secure and auditable. Key principles of this environment include:

• Assisted Onboarding: Procore actively assists with the initial company and Single Sign-On (SSO) setup to ensure proper configuration.

• Mandatory SSO: All internal employees are required to authenticate using your organization's SSO provider, eliminating the need for separate Procore passwords.

• Invite-Only Access: All users, including subcontractors, must be explicitly invited to the platform by your agency's administrator. There are no free or public accounts.

Before you begin, please ensure you have the following:

• Administrator Role: You have been designated as the primary Administrator for your organization's Procore account.

• Procore Invitation: You have received an email invitation from Procore to activate your account.

• SSO Information: You have access to your organization's Identity Provider (IdP) metadata or configuration details needed for setting up SSO.

• User Lists: You have a list of official email addresses for the internal employees and external collaborators you plan to invite.

Follow these steps to configure the Procore company account and onboard end users:

Step 1: Activate Your Administrator Account

Your first step is to activate your account, which must be created for you by Procore.

1. Locate the invitation to Procore for Government in your email inbox.

2. Click the link in the email to begin the setup process.

3. You will be prompted to create a secure password for your administrator account.

4. Follow the on-screen instructions to set up Multi-Factor Authentication (MFA). This is a mandatory security measure for all accounts that use a password in the Procore for Government environment.

Step 2: Configure Single Sign-On (SSO)

Next, you will work with Procore to connect your organization's Identity Provider (e.g., Okta, Azure AD, and so on) to your Procore company account.

1. Contact your designated Procore point of contact to initiate the SSO setup.

2. Provide your specialist with the required IdP metadata from your organization's IT department.
   An authorized member of the Procore team must configure the connection on the backend.

3. Once configured, work with your designated Procore point of contact to test the SSO connection by logging out and logging back in through your organization's SSO portal.

Step 3: Invite Agency Employees

After your SSO is active, you can begin inviting your team members. Government employees will authenticate using the established SSO connection.

1. Navigate to the company's Directory tool.

2. Click Add People.

3. In the Email Addresses field, enter the official agency email addresses for all internal users you wish to invite.

4. Assign a default Permission Template to define their initial access rights.

5. Click Add. Your employees will receive an invitation email and will access Procore through your agency's SSO provider without needing to set a password.

Step 4: Invite External Collaborators (Subcontractors)

You can also invite users from outside your agency, such as subcontractors or consultants.

1. Navigate to the company's Directory tool.

2. Click Add People.

3. Enter the email addresses of the external collaborators.

4. Assign an appropriate Permission Template, which is typically more restrictive than your internal templates.

5. Click Add.

   • If the collaborator already has an account in Procore's GovCloud environment, they will receive a notification to access your company.

   • If they are new to the environment, they will be prompted to create a new account with a password and MFA.

Once you have successfully invited your initial set of users, you can begin setting up your workspace:

• Create a Project: Navigate to the Portfolio tool to create your first project.

• Populate Project Directory: Add the relevant users from the Company Directory into your new Project Directory.

• Configure Permissions: Fine-tune user permissions for specific tools within your Procore project.