Single Sign-On Integration Leveraging SAML

The SAML Single Sign-On (SSO) feature lets you use an external identity provider service to manage user access to your company's OpenAir account using the Security Assertion Markup Language (SAML) protocol. SAML enables single sign-on (SSO), a scheme that allows users to sign in to one application — the identity provider — and automatically have access to separate applications — the service providers — without having to sign in to each of these other applications separately. It provides a method of secure integration with existing, on-site authentication infrastructures without exposing these services to direct public access, and enables federation of user identity across any number of additional services. SAML works well as a transport for LDAP and other popular authentication back-ends.

The SAML Single Sign-On feature lets you:

• Configure the SAML Single Sign-on feature to work with multiple identity providers.

• Review configured identity providers from a list.

• Configure the profile and upload the metadata XML file for each identity provider.

• Set any identity providers as active. Only active identity providers can be used for service provider or identity provider initiated single sign-on.

• Select one default identity provider. Service provider initiated single sign-on request are sent to the default identity provider when using the OpenAir sign-in page for single sign-on users.

To enable this feature, contact OpenAir Customer Support.