Accessing Sandbox Accounts

When a sandbox account is created, all users and roles are copied from the parent account to the sandbox. These users will be marked as Inactive within the sandbox, but the Sandbox Administrator can manage which users have access to the sandbox either by reactivating any users that were copied over or by adding new users directly to the sandbox. The following sections detail how sandboxes can be accessed depending on the parent account domain and based on whether the user has access to the parent account and how they currently log in.

Note:

Sandbox accounts can only be created and managed from the Global Settings > Sandbox Management screen within the root organization.

Available Points of Access

The points of access that can be used to navigate to a sandbox account will vary depending on if the parent account has a shared domain, a custom subdomain, or a Fully Qualified Domain Name (FQDN).

Parent Account

Access Points

Parent account has only a shared domain, such as app.onetrust.com

The sandbox account can be accessed by:

  • Accessing the Sandbox Management screen in Global Settings

  • Switching accounts while logged in to the parent account

  • Navigating directly to the Application Sandbox Domain in your browser

Parent account has a custom subdomain or FQDN

The sandbox account can be accessed by:

  • Accessing the Sandbox Management screen in Global Settings

  • Navigating directly to the Application Sandbox Domain in your browser

Sandbox Administrators

Upon creation, only the Sandbox Administrator will have access to the sandbox. Sandbox Administrators can view sandbox details and access sandboxes directly from the Sandbox Details screen. Once in the sandbox, Sandbox Administrators can navigate to User Management > Users in Global Settings to grant and manage access to the sandbox for other users.

Note:

Sandboxes will be inaccessible when pending creation and pending deletion.

  1. On the Global Settings menu within your parent account, select General Settings > Sandbox Management. The Sandbox Management screen appears.

  2. Select the sandbox that you want to access. The Sandbox Details screen appears.



  3. Access the sandbox either by clicking the Open Sandbox button or by copy and pasting the Application Sandbox Domain URL in your browser.

Sandbox Users

Once granted access to the sandbox, users can navigate to the sandbox using one of the following methods based on whether they have existing access to the parent account and whether they use Single Sign-On (SSO) or a password to log in to the parent account.

For sandbox-only users:

If SSO is set up separately in the sandbox account, users that only exist in the sandbox account will log into the sandbox account using the SSO setup configured in the sandbox account. If SSO is not set up separately in the sandbox account, users that only exist in the sandbox account will log into the sandbox account using a username and password.

When a user is added only to the sandbox account, the new user will be sent a Welcome email with a link to access the application. Clicking the link will take the user to the OneTrust Login screen and the user will be prompted to create a password before accessing the application. Once created, these users can navigate to the Application Sandbox Domain URL in their browser and log in using the password they created.

Note:

Sandbox-only users will not have access to the parent account.

For sandbox users with existing SSO access to the parent account:

SSO and SCIM User Provisioning configurations are not copied over during sandbox creation. If SSO is set up in the parent account that is using a custom subdomain or FQDN, users that exist in both the parent account and sandbox account will log into the sandbox account using the SSO setup configured in the parent account. If SSO is set up in the parent account that is using a shared domain, users that exist in both the parent account and sandbox account will log into the sandbox account using the SSO setup configured in the parent account.

For sandbox users with existing password access to the parent account:

Users who currently access the parent account using a password can navigate to the Application Sandbox Domain URL in their browser and log in using their existing password.

Alternatively, users can navigate to the sandbox while logged in to the parent account by simply switching the account by selecting Switch Tenants. The name of the sandbox will be the name defined during sandbox creation appended with the ID of the parent account, such as Gilbert Hughes - Sandbox_25759. For more information, see Switching Tenants.

Note:

Switching accounts is only available for parent accounts on a shared domain.