Introduction |
---|
![]() |
Why? When using Single sign-on-software (abbreviated to "213" SSO) as a user you do not have to remember different passwords for different applications. All you have to do is log in to your workstation and you'll have automatic access to Coachview. This way you don't have to log in every time, and the login screen is no longer displayed. |
There are 2 ways to integrate SSO.. |
Method 1 (preference):. Via'IdpInitiated Single Sign-on' from your own 'Identity Provider'. From there, a SAML request signed by us is sent to the Idp via http-post. If you are logged in and authorized on your side (the Idp), the Idp will send back a signed SAML response containing an (possibly encrypted) assertion with at least the “Name Id” claim filled. Coachview checks the signature and whether the “name id” claim contains the unique (external) ID that is known to the person. Then you are automatically logged into coachview. ![]() |
Method 2: You log in via Single Sign-on via the login page of Coachview. This is also called service provider-initiated Single Sign-on. The first time you log in as a user, the link (button 2) on the login page is not yet known and is therefore not shown. Please contact our support department for the name of this link. ![]()
![]() |
What does it take?
|
Important terms.
|
What do we need from you? |
Two possibilities:
|
One claim type "Name ID". This must be filled with the unique identifier (ExternalId to person), which is used in Coachview for the unique identification of the persons. |
The secure hash algorithm to be used is sha-1 for verifying the signature. |
Step-by-step plan. | Who? |
---|---|
Provide the required data. see "What do we need from the customer". | You |
Activate SAML2 authentication provider and settings adjust Coachview. | Coachview. |
Setting up Idp. Metadata from Coachview (service provider) is on:
| You. |
Set claim type. This must be filled with the unique identifier (ExternalId to person), which is used in Coachview for the unique identification of the persons. | You. |
The secure hash algorithm to be used is sha-1 for verifying the signature. | You. |
Set up Coachview. This is possible:
| Coachview. |
Creation of 1 test person to check SSO. | Jij en Coachview. |
If import 'Companies and Persons' is used - check for ExternalID. Note: if there is an error in this import, it is difficult to correct Creation or 1 test person to check SSO. | Coachview. |
Import 'Companies and Persons'. Final check. | You and Coachview. |