New article
Recently updated
Understanding Single Sign-On (SSO) settings
Who is this article for?
Administrators and Module Developers who need to understand or manage Single Sign-On (SSO) settings.
Defined responsibilities and elevated access required.
Overview
Single Sign-On (SSO) allows users to authenticate through an identity provider (IdP).
Module Developers typically configure SSO during implementation. Administrators with the appropriate permissions can also manage these settings.
SSO settings
The SSO Settings tab in administrative Preferences screen contains the settings used to manage SSO.
If SSO is required, the system uses the certificate uploaded in SSO Settings. You do not need to configure SSO behavior for individual users unless a user needs the option to sign in with a username and password in addition to SSO.
Upload Certificate
Certificates are digital documents used to authenticate secure communications between identity providers (IdPs) and service providers (SPs). Certificates expire and must be renewed periodically to maintain secure authentication.
Primary Certification
When a subscriber's Primary Certificate approaches its expiration date, an administrator can upload a Secondary Certificate to ensure that a valid certificate remains available.
SSO Type
Select saml or oidc to enable SSO authentication. Security Assertion Markup Language (SAML) and OpenID Connect (OIDC) are authentication protocols that provide standardized methods for verifying user identities.
Mobile SSO Type
Set SSO Type to saml on the Preferences screen to enable SSO authentication for mobile use. No additional mobile SSO settings are required.
Request Endpoint
The Request Endpoint is the URL of the identity provider (IdP) within the customer's security domain. The URL does not need to be accessible from the public Internet or Ideagen servers. However, the user's web browser must be able to access it directly, through a VPN, or through another secure network.
Multiple IdP
Multiple identity providers (IdPs) can be used for SSO authentication.
Match Field
The Match Field corresponds to the user's IdP identifier stored in the User object. Typically, this is Login username. Other common options include E-mail address and Employee ID.
Web Browser Configuration Values
The web browser SSO/HTTP configuration values enable secure authentication through a series of HTTPS transactions between the platform and the user's web browser.
- Issuer Name
- Protocol Binding
- Service Provider Endpoint
- Login URL (Miramar)
- SSO Login URL (Miramar)
- Login URL (Classic)
- SSO Login URL (Classic)
Additional Documentation
For additional information about SSO or to request the Single Sign-On Customer Implementation Guide, contact your Customer Success Manager (CSM) or Submit a ticket.
The Single Sign-On Customer Implementation Guide is confidential and should only be distributed to individuals who have signed a Non-Disclosure Agreement (NDA) with Ideagen or who are covered by a contractual confidentiality clause.