Required: You need to be an administrator in a team on an Enterprise plan and check in with your customer success representative to enable the feature.
To log in to Tactiq using SAML SSO you need to follow several steps.
Gather information from your identity provider
You need one of the two:
A public
Metadata URL, orSign on URL,Issuer, andSigning Certificate
Configure SAML SSO for Tactiq in your identity provider
You will need these values:
Single sign-on URLandAudience(also known asSP Entity ID) should be set tohttps://api2.tactiq.io/api/2/u/auth/saml/acsName ID formatshould be set toEmailAddressTwo attribute statements are required:
firstNameandlastName
Configure SAML in Tactiq and test the connection
Go to https://app.tactiq.io/#/settings/team and scroll to the
Authenticationsection.Click
Configurebutton next to theSAMLoption:
Paste the
Metadata URLyou have prepared earlier and clickLoad values from metadata:
Alternatively, you can paste individual values in their corresponding fields.
Click
Validateto test whether you can log in using these SAML settings:
You will be redirected back to this page after signing in with your identity provider. Now you can
Applythese settings:
Now your SAML SSO is configured but not yet enabled:
Enable SAML SSO in Tactiq
Close the popup in which you were configuring SAML:
Turn SAML on:
Optionally, disable other sign-in methods. When your team members try them next time, they will be redirected to your identity provider instead.