Set up SAML SSO

With SAML Single Sign-On (SSO), users can log in to the portal using their organisation account without a separate password. This article explains how to configure SAML SSO.

Requirements

• You need administrator rights to configure SSO.
• You need a SAML-compatible Identity Provider (IdP), such as Azure AD, Okta or ADFS.
• You need the metadata URL or metadata file from your IdP.

Set up SAML SSO

1. Go to Management > Management > My portal > SSO settings.

2. Select SAML as the authentication method.

3. Enter the following data:

   Field	Description	Required
   Entity ID	The unique identifier of the portal (Service Provider).	Yes
   SSO URL	The login URL of the Identity Provider.	Yes
   Certificate	The public certificate of the IdP for verifying SAML responses.	Yes
   Metadata URL	The metadata URL of the IdP (an alternative to manual configuration).	No
   NameID format	The format of the user identifier (for example, email address).	Yes

4. Click Save.

Configure the IdP

You must also configure the portal as a Service Provider (SP) in your IdP:

1. Copy the SP Metadata URL from the portal's SSO settings.
2. Add it to your IdP as a new Service Provider.
3. Configure the attribute mapping (for example, email address, name and department).

Note: Contact PlusPort for support with the technical configuration of SAML SSO.

Frequently asked questions

Can users still log in with a password?

This is configurable. You can choose to disable password login once SSO is active, or support both methods alongside each other.

What happens if the IdP is unavailable?

If the IdP is unavailable, users cannot log in through SSO. Make sure that a fallback option is available (for example, password login for administrators).

Is the user created automatically on the first SSO login?

This is not possible.