Single Sign On (SSO) allows you to easily manage who does and does not have access to the InscribeAI platform. This page will guide you through the steps required to configure SSO for your Workspace. Note that you will need to have admin permissions within your Workspace to follow these steps. You can view your permissions at your team page.
After completing the steps below, you will be presented with a screen which shows you all the values you need for your Identity Provider, in particular:
The Assertion Consumer Service (ACS) URL.
The Entity ID.
SAML Service Provider Public Certificate
Configuration in the Inscribe Settings
Use the navigation bar to open the Settings page, then choose 'SAML' from the menu. If SAML has not yet been configured for your Workspace, you will see a "Click to add a new Identity Provider" button. Click this button to get started.
A modal window will appear asking for information relating to your Identity Provider. Your Identity Provider will allow Inscribe to determine which of your users can login. Enter the values as described below.
Identity Provider name: The name of your Identity Provider. The name chosen will not affect your configuration, generally a good format is the name of your company followed by "Identity Provider".
Identity Provider Entity ID: This will be provided to you by your Identity Provider. This is typically a URI such as "https://yourcompany.com/saml/metadata.xml". If you do not have this ID yet, enter your company's domain name as a temporary ID.
Identity Provider Single Sign On URL: This will be provided to you by your Identity Provider. If you do not have this URL yet, enter your company's domain name as a temporary URL.
Identity Provider X509 Cert: This will be provided to you by your Identity Provider. If you do not have this value yet, please contact Inscribe support using the button on the bottom right of this page.
Advanced Settings for Identity Provider: Unless required by your Identity Provider, leave these at their default values.
Click "Add".
If you entered a temporary ID or temporary URL during step 3, you will need to update these with the values provided by your Identity Provider. Click "Edit" on the Identity Provider screen in the Inscribe app and enter the correct values for the Entity ID, Single Sign On URL, and the SAML Certificate.