SAML single sign-on (SSO)

1 minute read
On this page

Security Assertion Markup Language (SAML) is a standard for exchanging authentication and authorization data between an identity provider (IdP) and a service provider. SAML is a common single sign-on (SSO) configuration that allows users to sign in to multiple software applications using the same credentials. CloudBees platform uses the SAML 2.0 protocol to implement SSO.

The CloudBees platform SAML authentication is service provider (SP)-initiated. CloudBees platform integrates with an IdP provider by linking a CloudBees user with an IdP user. The connection is made using the SAML’s NameIdFormat, which is required. The default Active Directory setting usually does not include NameIdFormat, so you may have to add it manually.

Configure SSO

CloudBees platform SSO provides a streamlined user experience, as it allows you sign in to CloudBees platform with your existing credentials from another system.

To configure SSO in the CloudBees platform:

  1. Select Organization settings from the left pane. Expose the left pane, if necessary, by selecting on the left corner of the title bar.

  2. Select Single sign-on.

  3. Select CONFIGURE SAML.

  4. Enter a Domain name; for a user with email user@example.com, domain name is example.com.

  5. Copy the displayed challenge and paste into a TXT record that you create.

  6. Select VERIFY.