How to integrate with custom SSO saml 2.0
You can connect Calibris with any Identity provider using saml 2.0
System Requirements
- A user with an administrator role in the Identity Provider you wish to integrate.
- An Calibris user with an administrator role
- Calibris users whose email addresses match the email address in the Identity Provider you wish to integrate.
How to Set up SSO in your Identity Provider
- Check the documentation of your Identity Provider to integrate a new Service Provider.
- Fill out Identifier (Entity ID), Reply URL (Assertion Consumer Service URL), Sign on URL and Relay State, as shown in Calibris.
- As Attributes & Claims, choose Unique User Identifier (Name ID) as EmailAddress.
- Verify that the certificate is valid. Check that the value in the Status column is Active, and that the encryption algorithm in the Signing Algorithm field is SHA-256.
- If exists, download the federation metadata xml file.
- Then, go to Set up Calibris SSO. The values of the Login URL and Microsoft Entra ID fields are required on this left panel Done! You’ve set up SSO on the Microsoft Entra ID side.
How to Set up SSO in Calibris
- In the Your IdP information section, fill in the fields with the information from yur Identity Provider.
- In the Options section, leave the mode to value Mixed.
- Next, сlick Save.
- You're done!
Verify Single Sign-On
- Logout from Calibris to access the login page
- You now have a new button Log in with your corporate account.
- Click Log in with your corporate account.
- If you are already authenticated on one of your corporate applications, you will be automatically authenticated on Calibris and redirected to your home page.
- If you are not yet authenticated on one of your corporate applications, you will be redirected to a corporate site to authenticate yourself. Once authenticated, you will be automatically logged into Calibris and redirected to your home page.
- Congratulations! You've set up your SSO correctly.
- If an error occurs during configuration, please contact the support.