Setting up SSO

To make managing your expoze.io users within your organization easier, we offer the option to Single Sign On using SAML.

In order to set things up correctly, a couple of things need to be considered/in place:

• You need administrator access to expoze.io
• You need administrator access to your SAML provider (G-Suite, AWS, Azure) to set up your SAML application.

Setting up SSO varies per SAML provider. More information on specific providers can be found using the links below:

• More information on setting up SAML for Microsoft/Azure/O365
• More information on setting up SAML for AWS
• More information on setting up SAML for G-Suite

The necessary unique URL's for your expoze.io environment can be found under the SSO tab in expoze.io's account wide settings.

To set up SSO you can follow the generic steps below, in addition to following the steps based on the SAML provider of choice (please ensure you follow the relevant steps provided by your SAML provider)

1. Log in to the expoze.io web application and head over to your account wide settings.

2. In a separate tab, head to the admin portal for your desired SAML provider and follow the steps to add a new SAML app.

   Note: when asked for specific app related information, refer back to the tab in which you have opened the account wide settings. Here you will find (and are able to copy) the login portal URL and the ACS URL, as shown in the image below.

   

3. Once the app has been set up on the SAML provider side, head back to the tab in which you have the account wide settings open and click Add SAML. This will open a pop-up with necessary details in order to set up your SSO properly. Fill in the details using the data provided by your SAML provider:
   1. App name: This is the name you've given the SAML app on the side of your SAML provider. E.g. G-Suite SAML for expoze.io
   2. Entity ID: a URL containing a unique id, provided by your SAML provider.
   3. SSO URL: the IdP SSO URL for SP initiated authorization, provided by your SAML provider.
   4. Certificate: your IdP certificate for signing the auth message, provided by your SAML provider.
4. Click save to store your SAML settings. Once saved, the related data will be stored and shown below.
5. Users should now be able to access expoze.io using SSO. The login URL for SSO can be found under account wide settings and is named "Login portal".