Skip to main content

SSO Configuration

Embrace offers SSO support using SAML 2.0. This documentation goes over how to configure SSO for your organization using OneLogin as the SSO provider, however these steps would be very similar with other providers and Okta, PingIdentity and Google have been tested.

If you need assistance configuring SSO with other providers please email us or Slack us.

We currently support IdP-initiated login. This means that if you're using SSO for your organization, you should navigate to your organization's SSO portal and select our app from the portal. That will bring you directly to the Embrace dashboard. You will not be able to access the dashboard via SSO if you do not go through your organization's SSO portal. If you prefer to use SP-initiated login, please let us know and we'll work with your provider to enable it.

Configuring SSO for OneLogin​

In order to properly configure SSO for OneLogin, we'll need two pieces of information which you will need to obtain from OneLogin's web portal:

  1. Metadata URL: This can be found in the OneLogin admin portal, referred to as the Issuer URL. Add the Embrace app connector from OneLogin's App Catalog and navigate to SSO in the side menu. The Issuer URL should be displayed there.
  1. Domain: In most cases, it will be the domain of your email (i.e. example.com if your email is bob.smith@example.com).

Once you have obtained those two pieces of information, navigate to dash.embrace.io and select your app:

  1. Navigate to the Settings Page (gear icon on the top right hand corner of the dashboard).
  2. Select the SSO Tab. Note: SSO is an enterprise-level feature and you'll need to contact support@embrace.io if it has not yet been enabled for your organization.
  3. Once you're able to access the SSO Tab, input your Metadata URL and your Domain. Note: You must be an admin to make changes to the SSO configuration.

  1. Select if you wish to Allow Login or not. If you toggle Allow Login, you will allow your organization's users to bypass the SSO flow. If your organization adheres to strict SSO policies, this is highly not recommended.

  2. Once the Metadata URL and Login Domain are input and saved, we will generate an Org ID for you towards the right of the config panel.

  1. Once you've generated your Org ID, head back to your OneLogin portal and select the Embrace app.

  2. Back in OneLogin, navigate to Configuration in the side menu and input your Org ID that we've generated into the Org ID field.

If you've followed all of these instructions, SSO should be configured for your organization. We're planning on adding support for other SSO providers as well as SP-initiated login in the future.

Feel free to email us or Slack us if you have any questions or feedback!