Finalize and test member hubs single sign-on

After the configuration of the SAML 2.0 app in the identity provider is completed, you can finalize the hub single sign-on settings.

• A Community admin must have completed the setup in Enable Single Sign-on for a member hub.
• An IT administrator must have completed the setup for Azure AD or OneLogin.

Note:

This task must be completed by a Community admin.

1. On the task toolbar, click Properties > Settings.
   
2. In the Single Sign-on tab, scroll down to the SAML SSO section.
3. Click on the single sign-on entry you are configuring.
4. Enter the required value from the identity provider in the Metadata URL text box.
   This value is specific to the identity provider app configured by your IT administrator, and they need to provide you with the value.
5. To complete the SP-initiated SSO configuration:
   1. Select the SP-Initated SSO radio button.
   2. Optional: In the Customize button text text box, enter the button label to display to end users on the member hub sign-in page.
   For more information on SP-initiated SSO, see Identity provider initiated SSO for member hubs.
6. To complete the IdP-initiated SSO configuration:
   1. Select the IdP-Initiated SSO radio button.
   2. Enter the identity provider URL to redirect users to in the SSO Button URL (Identity Provider Initiated Sign-in URL) text box.
      • For Azure, your IT Administrator needs to provide you with the Login URL from your Azure app.
      • For OneLogin, enter the URL for the OneLogin sign-in page.
   3. Optional: In the Customize button text text box, enter the button label to display to end users on the member hub sign-in page.
   For more information on IdP-initiated SSO, see Identity provider initiated SSO for member hubs.
7. To display the SSO sign-in button on the member hubs sign-in page, select the Show SSO button on the Sign-in page checkbox.
8. If you are ready to enable single sign-on for the hub, select Activate Single Sign-on at the top of the entry.
9. Click Save.

The system administrator and the Community admin need to coordinate to ensure that the required users and groups are configured for the identity provider and that these user can successfully authenticate using the identity provider.

Click the Runtime errors button to view a log of an recent errors that have occurred in connecting to or authenticating users with the Identity Provider.

Related information

• Single sign-on configuration process for a member hub