SSO

Configure Single Sign-On with different SAML or OpenID Connect providers

How to configure CISO Assistant

Providers

• Microsoft Entra ID

• Okta

• Keycloak

• Google Workspace

Configure CISO Assistant with SAML

Once you've retrieved the IdP Entity ID, the Metadata URL and the Entity ID from your provider (see the list of providers for specific details), the configuration on CISO Assistant is pretty simple.

1. Log in into CISO Assistant as an administrator > Extra > Settings

   
2. Enable SSO

   
3. Enter the Idp Entity ID

   
4. Choose the option 1 or 2 depending of your provider and fill Metadata URL or SSO URL, SLO URL, x509 certificate retrieved from your provider

   
5. Check that the SP Entity ID is similar to the Entity/Client ID specified on your provider

   
6. And that's it ! Don't forget to save changes

7. You should now be able to see the Login with SSO button

   

Configure CISO Assistant with OpenID Connect (OIDC)

OIDC support has not been released yet. You can track our progress on this Pull Request: https://github.com/intuitem/ciso-assistant-community/pull/2131

Once you've retrieved the IdP Entity ID, the Metadata URL and the Entity ID from your provider (see the list of providers for specific details), the configuration on CISO Assistant is pretty simple.

1. Log in into CISO Assistant as an administrator > Extra > Settings

   
2. Navigate to SSO settings

   
3. Enable SSO

   
4. Select the OpenID Connect provider

   
5. Enter the Client ID

   
6. Enter the Client secret

   
7. Enter the Server URL

8. And that's it! Don't forget to click the 'Save' button

9. You should now be able to see the Login with SSO button

Be aware that the user needs to be created on CISO Assistant to be authenticated with SSO.