Scribble Maps Help Center
Change language

ꀉꌠꅇꌠ SSO (Single Sign-On) ꀊꑌꉬ - (Team web app)

SSO ꀋꇬꀂꌠꐥ

Single Sign-On ꃅꄿꀊꌠꃅꑌꄷꋍꌠꀋꌠꒉꉬꏂꑍ,ꌠꐥꀊꑌꏂꑍꀋꌠꀊꌠꑌꉬ Okta, Microsoft Entra ID (Azure AD), Google Workspace ꀋꌠ Auth0 ꀊꌠꑌꉬꀊꑌ. SSO page ꀋꇬꀂꌠꐥ. Owner ꀋꌠ admin ꀊꌠꑌꉬꀊꑌ. Page ꀋꇬꀂꌠꐥ Single Sign-On (SSO).

Page ꀋꇬꀂꌠꐥꄷꋍ tab ꀊꌠꑌ: Email Domains, OIDC, SAML 2.0. OIDC ꀋꌠ SAML 2.0 ꀋꇬꀂꌠꐥꀊꌠꑌꉬꀊꑌ.

Step 1: Email domain ꀊꌠꑌꉬ

Email Domains tab ꀊꌠꑌꉬ. Domain verification ꀋꇬꀂꌠꐥ SAML ꀋꌠ OIDC ꀊꌠꑌꉬꀊꑌ.

  1. Add Email Domain ꀋꇬꀂꌠꐥ, domain (example.com) ꀊꌠꑌꉬ Add Domain ꀊꌠꑌꉬ.
  2. Domain ꀋꇬꀂꌠꐥ Pending Verification. How to Verify ꀊꌠꑌꉬ.
  3. Method ꀊꌠꑌꉬ: - DNS TXT Record: DNS ꀋꇬꀂꌠꐥ TXT record ꀊꌠꑌꉬ. DNS ꀊꌠꑌꉬ 48 ꀊꌠꑌꉬ. - File Upload: https://yourdomain/.well-known/scribblemaps-verify.txt ꀋꇬꀂꌠꐥ text file ꀊꌠꑌꉬ. HTTPS ꀊꌠꑌꉬ.
  4. Verify Now ꀊꌠꑌꉬ. ꀊꌠꑌꉬ "Domain verified successfully!" ꀋꇬꀂꌠꐥ Verified.

DNS ꀋꌠ file ꀊꌠꑌꉬ, [email protected] ꀊꌠꑌꉬ.

Step 2 (option A): OIDC ꀊꑌꉬ

OIDC tab ꀊꌠꑌꉬ.

  1. Callback URLs ꀋꇬꀂꌠꐥ Redirect URI / Callback URL ꀊꌠꑌꉬ.
  2. Quick Setup ꀋꇬꀂꌠꐥ, discovery URL (.well-known/openid-configuration) ꀊꌠꑌꉬ Import ꀊꌠꑌꉬ.
  3. Provider Settings ꀋꇬꀂꌠꐥ: - Provider Type - Client ID - Client Secret - Authority / Issuer URL
  4. User Settings ꀋꇬꀂꌠꐥ Just-In-Time (JIT) Provisioning ꀊꌠꑌꉬ.
  5. Security Settings ꀋꇬꀂꌠꐥ Require Multi-Factor Authentication (MFA) ꀊꌠꑌꉬ.
  6. Save Settings ꀊꌠꑌꉬ, Test Connection ꀊꌠꑌꉬ. Test SSO Login ꀊꌠꑌꉬ.
  7. OIDC SSO enabled switch ꀊꌠꑌꉬ.

Identity provider ꀋꇬꀂꌠꐥ app ꀊꌠꑌꉬ, Web Application ꀊꌠꑌꉬ (SPA ꀋꌠ Native ꀋꌠ), Client Secret ꀊꌠꑌꉬ.

Step 2 (option B): SAML 2.0 ꀊꑌꉬ

SAML 2.0 tab ꀊꌠꑌꉬ.

  1. Service Provider (SP) Information ꀊꌠꑌꉬ: SP Entity ID / Audience URI, Single Sign-On URL / ACS URL, SP Metadata URL.
  2. Quick Setup ꀋꇬꀂꌠꐥ provider ꀊꌠꑌꉬ metadata URL ꀊꌠꑌꉬ.
  3. Identity Provider (IdP) Settings: - IdP Entity ID (Issuer) - IdP Single Sign-On URL - IdP Single Logout URL (ꀊꌠꑌꉬ) - IdP X.509 Certificate PEM format
  4. Advanced Settings ꀋꇬꀂꌠꐥ Signature Algorithm (SHA-256) ꀋꌠ NameID Format ꀊꌠꑌꉬ.
  5. User Settings ꀋꇬꀂꌠꐥ Just-In-Time (JIT) Provisioning ꀊꌠꑌꉬ.
  6. Save Settings ꀊꌠꑌꉬ, Test Connection ꀊꌠꑌꉬ. Test SSO Login ꀊꌠꑌꉬ.
  7. SAML SSO enabled switch ꀊꌠꑌꉬ.

Protocol ꀋꇬꀂꌠꐥꀊꌠꑌꉬ

OIDC ꀋꌠ SAML ꀋꇬꀂꌠꐥꀊꌠꑌꉬ. ꀊꌠꑌꉬ page ꀋꇬꀂꌠꐥ ꀊꌠꑌꉬ. "SAML is currently enabled. Would you like to disable it?" Disable SAML ꀋꌠ Keep Both ꀊꌠꑌꉬ.

SSO users ꀊꌠꑌꉬ

Page ꀋꇬꀂꌠꐥ SSO Provisioned Users card ꀊꌠꑌꉬ. Show ꀊꌠꑌꉬ, Hide ꀊꌠꑌꉬ. Email, Name, Created, Last Login ꀊꌠꑌꉬ. "No users have been provisioned via SSO yet."

Last updated