Configuring SAML SSO for TalentLMS

These steps will guide you through setting up the SAML-based single sign-on functionality between ADSelfService Plus and TalentLMS.

Prerequisite

1. Log in to ADSelfService Plus.
2. Navigate to Configuration > Self-Service > Password Sync/Single Sign On.
3. Click Add Application.
4. In the window that appears, you will find the list of applications supported by ADSelfService Plus. Choose TalentLMS.
Note: You can also use the search bar in the top-left to search for the application.
5. Click IdP Details in the top-right corner.
6. In the pop-up that appears, click on the SSO (SAML) tab and record the Entity ID, Login URL, Logout URL, and SHA1 FingerPrint values, which will be required to configure SSO in the service provider.

Configuring the Service Provider (TalentLMS)

1. Log in to TalentLMS using administrator credentials.
2. Navigate to ACCOUNT & SETTINGS > Users.

3. Click on Single Sign-On (SSO).

4. From the SSO integration type drop-down, choose SAML 2.0.

5. Enter the values copied in step 6 of Pre-requisites corresponding to Identity Provider, Certificate fingerprint, Remote sign-in URL and Remote sign-out URL.

Identity Provider: Entity ID

Certificate fingerprint: SHA1 FingerPrint

Remote sign-in URL: Login URL

Remote sign-out URL: Logout URL

6. Also, enter the Targeted ID, First name, Last name, and Email using the below mentioned values.

Targeted ID: tid

First name: first_name

Last name: last_name

Email: email

7. Click Save and check your configuration.

8. From the SSO login screen drop-down, choose Login page + IdP login link.
9. Then, click Save.

Configuring ADSelfService Plus

1. Switch back to the ADSelfService Plus console.
2. Enter a suitable Name and Description for the application.
3. Type the Domain Name. For example, if you use johndoe@selfservice.com to log in to the application, then selfservice.com is the domain name.
4. Choose the required policies from Assign Policies drop-down.
5. Under the SAML tab, check the box next to Enable Single Sign-On.
6. Enter the name of the Sub Domain. For example, if your portal URL is https://self-service.talentlms.com, enter self-service as Sub Domain.

7. Click Add Application.

You have successfully configured TalentLMS SSO functionality via ADSelfService Plus. Users should now be able to sign in to TalentLMS through ADSelfService Plus.