Set up an SAML integration

TABLE OF CONTENTS

• Introduction
• Contact CSM
• Set up your identity provider
• Complete the configuration
• Test the configuration
• Confirm success
  
  

Introduction

Having a Single Sign-On (SSO) integration using the Security Assertion Markup Language (SAML) protocol allows users to access the Collegial application with a single set of credentials.

This guide provides step-by-step instructions on how to configure SAML SSO integration.

Contact CSM

Notify your CSM and Collegial Support that you wish to initiate the SSO process.

During the first meeting you will need to establish:

1. Communication channel - ensure that Collegial has an effective way to communicate with relevant stakeholders. That might be either in a Slack channel, a Teams channel or via email
2. IT Team’s SSO Contact(s)
3. Testing flow - decide on how you are going to test the SSO flow
4. Timeline of the implementation

Your CSM and Collegial Support will provide you with the following metadata:

1. SAML Entity ID
2. The Post-back URL (also called Assertion Consumer Service URL)
3. List of attribute claims (optional)

Set up your identity provider

This step involves setting up your identity provider (IdP) for SAML authentication. Using metadata obtained from your CSM, log in to your IdP's admin console, to create and configure a new SAML application.

Collect and exchange the following metadata provided by your IdP:

1. SAML endpoint URLs
2. Signing certificates

or share SAML metadata file.

Complete the configuration

After receiving metadata, Collegial completes the configuration on the platform. This usually takes up to two days.

Test the configuration

Once configured, perform a test authentication to ensure that the SAML connection is working as expected. Verify that users can authenticate to your application using their IdP credentials.

In case of any questions, Collegial will diligently monitor the newly established SSO connection, offering assistance with monitoring and troubleshooting as needed.

Confirm success

Time to celebrate! Your SSO configuration is ready for use!