Skip to content
Help Center

Set up single sign-onStep 5 of 80:33 video

Configure SAML

Connect SimplyDo to your SAML2 identity provider.

With SAML, SimplyDo sends people to your organisation’s identity provider to sign in. The provider sends them back with a signed response, which SimplyDo checks before signing them in.

If your organisation uses Microsoft Entra ID, sign-in with Microsoft is usually quicker to set up.

From your identity provider, you need its sign-on URL, its sign-out URL and its signing certificate.

  1. On the Sign-on tab, click Manage on the SAML SSO card.

  2. Under Identity provider settings, enter your provider’s Sign-on URL, where SimplyDo sends people to sign in.

  3. If your provider’s entity ID is different from its sign-on URL, enter it under Identity provider entity ID. Otherwise leave it blank.

  4. Enter the Sign-out URL, where SimplyDo sends people after they sign out.

  5. Paste your provider’s signing certificate under X.509 certificate (PEM format), including the BEGIN CERTIFICATE and END CERTIFICATE lines.

  6. Under Attribute mappings, enter the names of the attributes your provider sends. The email address is required; add the first and last name so accounts show people’s names.

  7. Click Save changes. A message confirms the settings are updated.

  8. Under Configure your provider, note the URLs your identity provider needs from SimplyDo. You’ll enter them in your provider next.

  9. Click Back to sign-on settings.

  10. Turn on Enabled on the SAML SSO card. The sign-in page now shows a single sign-on button.

To only let some people in, fill in Authorisation before you save: SimplyDo then checks an attribute against a pattern, for example attribute department and pattern Finance. Leave it blank to let in everyone your provider signs in.

SimplyDo won’t turn SAML SSO on until a sign-on URL and certificate are saved. The sign-in button only works once your identity provider is set up too, so keep Standard sign-on on until you’ve tried it.