Supported Identity Providers
- Okta (SAML 2.0 & OIDC)
- Microsoft Entra ID / Azure AD (SAML 2.0 & OIDC)
- Google Workspace (SAML 2.0 & OIDC)
- Ping Identity / PingFederate
- Auth0 / CyberArk
SAML 2.0 Configuration
- In your IdP, create a new SAML 2.0 Application.
- Enter the Snapsec Service Provider (SP) metadata:
- Single Sign-On URL (ACS):
https://<your-domain>/auth/saml/callback - Entity ID (Audience URI):
https://<your-domain>/auth/saml/metadata - Name ID Format:
EmailAddress
- Single Sign-On URL (ACS):
- Map the required SAML attributes:
email-> User EmailfirstName-> User First NamelastName-> User Last Namegroups-> IdP Group Membership (optional)
- Upload your Identity Provider Metadata XML in Platform > Administration > SSO & Authentication.
- Enable Enforce SSO to require all non-administrator users to authenticate via your IdP.