Single Sign-on SAML 2.0

Single sign-on (SSO) is an authentication method that enables SubscriptionFlow clients to securely authenticate with multiple applications and websites by using just one set of credentials.

Registering with Identity Security Provider IDP provides a security certificate that is exchanged between the identity provider and the service provider. This certificate can be used to sign identity information that is being sent from the identity provider to the service provider so that the service provider knows it is coming from a trusted source.

In SubscriptionFlow Single Sign-on, this identity data takes the form of tokens that contain identifying bits of information about the user like a user’s email address or a username.

To configure the single sign-on with SubscriptionFlow, click on "Admin settings" (Gear icon) from the top left navigation bar and navigate ‘Single Sign-On’ under the section of ‘Users and Control’.

2. You will be directed to this screen, click on the ‘Enable Single Sign-on’ Tab.

3. A new pop-up window reveals you to enter the following information:

1. Choose your protocol. (SubscriptionFlow supports SAML 2.0 and OpenID Connect) :

2. Choose your IDP

IDP is the identity provider. SubscriptionFlow supports the following:

Once you have created an account with the IDP, you will be given the domain address at which you would like to be redirected after login and logout. Provide the URL here:

SAML Certificate

SAML is the security exchange agreement that would be provided when you get registered with the identity provider. Enter the certificate as it is provided and save the configuration.