Administrators can configure Single Sign On (SSO) for users in CommunitySuite, enabling them to access the platform using their existing organization credentials. For SSO authentication to work properly, the login credentials in user profiles within CommunitySuite must match the SSO credentials configured in your identity provider. Before enabling SSO, administrators should verify that all user profile email addresses in CommunitySuite match the email addresses or usernames used in your identity provider.
Configure the SSO Connection
Administrators with access to the organization's identity provider configuration can configure SSO in CommunitySuite. CommunitySuite will require profile and email permissions from your provider, allowing it to access name, username, and the user's primary email address in the ID token. Before you begin, open your identity provider in a separate browser tab or window.
- Navigate to the Users page and click SSO Settings in the left-side menu.
- Select an Identity Provider and then click Next Step.
- If Entra/Azure AD (Active Directory) is selected, the administrator will be prompted to enter the Identity Provider Domain Name before starting onboarding.
- If Entra/Azure AD (Active Directory) is selected, the administrator will be prompted to enter the Identity Provider Domain Name before starting onboarding.
- Click the Onboarding Link.
- Click Get Started.
- This button will be available in the lower right corner of the page.
- This button will be available in the lower right corner of the page.
- Select your Identity Provider, and then click Next.
- For this example, Entra ID is selected.
- For this example, Entra ID is selected.
- Configure the SSO connection using the applicable Identity Provider.
- Below is a sample of Entra ID.
- Additional setup steps will be available directly on the configuration pages for certain providers.
Once SSO has been configured, a confirmation message will display, and it can be tested for individual users before enabling the entire organization.
Enable SSO for an Individual User.
Once SSO has been configured, it can be enabled for individual users. Administrators can do this for the user while logged in as them, or users can do it themselves.
- Click the user's name in the upper right corner.
- Click Enable SSO Login in the left-side menu.
Enable SSO for All Users
Once SSO has been configured, administrators can enable it for all users.
- Navigate to the Users page, and then click Settings in the left-side menu.
- Click Edit Settings in the left-side menu.
- Check the Automatically Link SSO Users box, and then click Update.
User Login with SSO
Users can proceed to log in with SSO.
- Navigate to the CommunitySuite login page.
- Click Login with SSO.
- Enter your corporate email address.
- You will be redirected to your organization's login page.
- Authenticate with your corporate credentials.