Federated Single Sign On

Federated Single Sign-On (SSO) is an optional capability that allows eligible organizations to connect Textura to their identity provider (IdP). Users sign in with their existing organization credentials, reducing the number of passwords they need to remember and manage. SSO simplifies access to Textura and gives organizations centralized control over authentication through their existing identity and security policies.

When a federated user starts to log in to Textura, they are redirected to their organization IDP for authentication (username, password). The IDP then sends a SAML response to the Textura SSO service (SP) indicating that the user is authenticated, and the username / email. A relationship called a Relying Party Trust is set up beforehand between the SP and the IDP so the two systems can cooperate. SP then creates a user session in Textura and redirects the user to Textura with the new session.

Note: Textura does not see or have access to the user's password. That is known only to the IDP.