SSO Setup and Login

SSO (Single sign-on) is a session and user authentication service that permits a user to use one set of login credentials (name and password) to access multiple applications.

The SSO option is managed by the super admin. The super admin role includes can enable the SSO option for the company, and, manage roles and attributes received from SSO. 

Once the SSO functionality has been configured, the user will be able to log in using SSO by clicking on the SSO button available on to the login page. 

To enable the SSO feature for your team, you will have to configure it on the platform backoffice. To do this access the settings page by clicking on your profile picture.

A couple of options will appear. Select the "Settings" option.

Once inside the settings page, select the "SAML SSO" tab.

Once in the SAML SSO tab, you must fill all the requested information in order to enable this feature for your team. The fields you need to fill in are:

• Single sign-on URL: URL to send the SAML authentication requests to.

• IdP Entity ID or Issuer URL: You can find the value in your SAML server configuration or in the metadata XML provider by your IdP.

• Signing certificate: X509 certificate to verify the signature in the SAML authentication response.

• Default membership role: Default membership role if the role field is not found or its value is not defined in SAML groups.

• SAML Callback URL 

If you scroll down you will also find some optional settings. 

• Sign SAML authentication request: Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints.

• Email attribute name: The attribute name for email/role in the SAML response.
  

• Group attribute name: The attribute name for group in the SAML response.

• SAML Attributes: Add a list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. 

• Constant Attributes: Service Provider Attribute
  

• SAML Group Name: Choose a name for the SAML Group
  

• Access Level: The access level the user can have - regular or admin.
  

The SSO includes many advantages as it enables users to remember and manage fewer passwords and usernames for each application, streamlining the process of signing on and using applications  with no need to re-enter passwords. 

To log in via SSO, simply click on the "SSO" button on the main page.

If you have any questions please contact technical support.