Single Sign On Using SAML 2.0
CompliSpace supports the SAML 2.0 protocol.
CompliSpace technology supports this single sign-on experience as the integration of a SAML 2.0 compliant Identity Provider (IdP) you have already installed and have made operational.
Integrating with CompliSpace products using SAML 2.0 allows your directory to tell CompliSpace details about the user such as name and email address. It also has the advantage that access permissions in some CompliSpace products are controlled by your directory, allowing a single 'source of truth' without having to manage permissions separately inside the application.
CompliSpace technology works to provide support with the SAML protocol, however, your Identity Provider (IdP) is a third-party product and therefore CompliSpace technology cannot provide detailed support for the deployment, configuration, troubleshooting, best practices, etc. Issues and questions regarding your Identity Provider (IdP) will need to be directed to your vendor.
CompliSpace technology recommends that you engage a service provider like Student Net for your identity requirements. For those using Microsoft products, ADFS provides some level of SAML support.
Please review our Technical Notes and Implementation Journey (below) for more information about the steps required integrate with CompliSpace Products using SAML 2.0.
SAML With Google for CompliSpace Products
CompliSpace technology also supports the single sign-on experience via SAML with Google - GADS. For more information please discuss with your CompliSpace Consultant Team.
Implementation Journey
| Step | Details |
|---|---|
| 1. | The client provides their CompliSpace Consultant Team with ICT manager (or equivalent) contact details |
| 2. | CompliSpace Consultant Team provides the Client with our Single Sign On Form. |
3. | Client completes the SSO Form |
| 4. | CompliSpace will provision relevant CompliSpace Products for SSO and create/configure clients proxy |
| 5. | CompliSpace will share with the client the Metadata file |
| 6. | Client share their metadata with CompliSpace |
| 7. | Trust established |
| 8. | CompliSpace will liaise with the client to establish user groups, PolicyPlus sections and site codes |
| 9. | CompliSpace will liaise with the client to test SSO |
| 10. | Once SSO testing is successfully completed, SSO switched on |
| 11. | The client communicates to local users access availability |