How to configure SAML single sign-on for Samanage

ADSelfService Plus supports Active Directory (AD)-based single sign-on (SSO) for Samanage logins and many other SAML-enabled enterprise applications. When Samanage SAML SSO is enabled, users only have to log in to ADSelfService Plus, the identity provider, once. After logging in, users can securely access their Samanage accounts without having to enter their usernames and passwords again.

ADSelfService Plus provides identity provider (IdP)-initiated SSO for Samanage logins.

IdP-initiated Samanage SSO: Users need to log in to the ADSelfService Plus user portal first, and then click Samanage in the Applications tab to access Samanage.

Follow the guide below for Samanage SSO logins

Configuring your Active Directory domain in ADSelfService Plus

For more details, click here.

Getting the Samanage SAML SSO details from ADSelfService Plus

1. Log in to ADSelfService Plus with admin credentials.
2. Go to the Applications tab → Add Applications, and select Samanage from the displayed applications.

   

3. Enter the Application Name and the Description.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your Samanage account. For example, if you use johndoe@samanage.com to log in to Samanage, then samanage.com is the domain name.
6. Enter the SAML Redirect URL. Refer step 15, and use Login URL as the SAML Redirect URL.
7. Enter your Company Name. Refer step 15.
8. Click Add Application.
9. In the pop-up that appears, copy the Login URL, Logout URL, and Error URL, and download the X509 Certificate file.

   

Configuring SSO settings in Samanage

10. Log in to Samanage using admin credentials.
11. Navigate to Dashboard → Setup.

    

12. Go to User & Access → Single Sign-On.

    

13. Select Enable Single Sign-On with SAML.
14. In the Identity Provider URL, paste the copied Logout URL from step 9.
15. Copy the Login URL, and use it as the SAML Redirect URL in step 6. If your login URL is then testind is the Company Name.

    

16. Open the SSO certificate downloaded (rsacert.pem) downloaded during step 9, and paste its content in the x.509 Certificate field.

    

17. Click Update.

Your users can now log in to their Samanage accounts automatically using single sign-on.