Set up single sign-onArticle 6 of 8
Configure your identity provider
Register SimplyDo as a service provider in your SAML2 provider.
Your identity provider also needs to know about SimplyDo. Every provider looks different, but the steps are much the same. You’ll find the values under Configure your provider on the SAML2 single sign-on page in SimplyDo.
- In your provider’s admin console, open its list of apps. It may be called Connected apps, Service providers or Applications.
- Add a new app (sometimes Register a new SP or Create app) and give it a name people will recognise, such as SimplyDo.
- Enter the values below, then save.
| In your identity provider | Enter from SimplyDo |
|---|---|
| Service URL (or App URL) | Sign-on URL |
| Entity ID (or Audience) | Metadata URL |
| ACS URL (or Assertion Consumer Service URL, Reply URL, Callback URL) | ACS URL |
| Logout URL (if asked) | Logout URL |
If your provider asks which binding or HTTP method to use for the response, choose POST. If it can read metadata from a URL, give it the Metadata URL to fill in the rest.
Attributes
Section titled “Attributes”Your provider sends details about each person as attributes. Make sure it sends one for each mapping you entered under Attribute mappings in SimplyDo, with exactly the same name:
| SimplyDo attribute | Example attribute name |
|---|---|
| User’s email address (required) | email |
| User’s first/given name | firstName |
| User’s last/family name | lastName |
Without an email address, SimplyDo can’t sign the person in. If you leave the service identifier empty, SimplyDo uses the response’s NameID.
Once both sides are set up and SAML SSO is turned on, people can sign in with the single sign-on button.