Tell me about SAML SSO

How does it work?

 

Account Requirements

 

Enable SAML for all users

 

Enable SAML for select users

 

Can I also enable VIP?

 


How does it work?

When SAML SSO is activated for a user account, the user will no longer log in to the service using their service credentials. Instead, users will click a link to enter a username and password to authenticate to their identity provider (IdP). Upon successful authentication, the IdP redirects to the service's Assertion Consumer Service URL, the service validates the contents of the response, resolves the usernames and starts the user's session.

Account Requirements

The account must have these settings:

1) SAML SSO must be enabled for your subscription by support or your account manager.  

2) The New Data Security Model must be accepted for the subscription. A Manager can opt in by going to Users > Setup > Security.

Enable SAML SSO for all new users

Go to Users > Setup > SAML SSO Setup. Select the option "Enable SAML SSO for new users".

Enable SAML SSO for select users

Go to Users > Users and edit the user's account. You'll see the SAML SSO option in the Security section.

Can I also enable VeriSign VIP?

If both VeriSign VIP and SAML SSO are turned on for the same account, SAML SSO will be used and the VeriSign VIP option will be ignored.