SAML

Overview

Let your team sign in to the UniSignIn dashboard with your company's identity provider, such as Okta, Microsoft Entra ID or Google Workspace, through SAML single sign-on. This is for your staff, not your readers. For reader sign-in, see Single Sign-On.

Connect

1. In your identity provider, add UniSignIn as a SAML application. Use your licence ID, shown at the top of Connect → SAML, and contact us for the rest of the service provider details. Your identity provider must send the user's email address as the Name ID.
2. Go to Connect → SAML and turn on Enable.
3. Enter Your domain, the email domain your team signs in with, e.g. example.com.
4. From your identity provider, enter the Entity ID of IDP, Login URL of IDP, Logout URL of IDP and X509 certificate of IDP.
5. Under Users, add the email addresses allowed to sign in. Leave it empty to let everyone in your identity provider sign in.
6. To require single sign-on, turn on Disable Email/Password Login.
7. Click Save Changes.

Use it

• On the UniSignIn login page, your team clicks Continue with SSO and enters your domain. They are sent to your identity provider and back to the dashboard.
• A colleague signing in for the first time joins your organization without a role. Give them a role in Administration → Organization, see Team and Roles.
• The number of users you can add is limited by the seats on your plan.