SSO Setup
IT-Conductor supports SAML 2.0 based Single Sign-on
In SAML terms there are two parties:
- Identity Provider that supplies the user authentication and is your trusted enterprise credentials - Okta, Microsoft ADFS (Azure or on-prem), Google Workspace, AWS IAM Identity Center, etc.
- Service Provider - in this case it is IT-Conductor - that supports SSO with Identity Provider, so you don't need to maintain/remember separate set of credentials
To configure Identity Provider you will need the following IT-Conductor SAML information:
- Entity ID: https://service.itconductor.com
- Assertion Consumer Service URL: https://service.itconductor.com/saml/acs
- Relay State URL: https://service.itconductor.com/home
- Logout URL: https://service.itconductor.com/saml/logout
Depending what type of Identity Provider you are configuring use below links otherwise use vendor instructions and the information above
When the Identity Provider configuration is complete either export Identity (Federation) Metadata XML and/or copy the following attributes:
- Identity Provider Identifier
- Login URL
- Logout URL
- Certificate (Base64)
In IT-Conductor navigate to Management -> Security -> SSO Identity Providers
Identity Providers
If you have exported previously Identity Metadata XML - click 
and import the file - this will create the new Identity Provide definition.
Alternatively, click 
to create a new Identity Provider definition
Create Identity Provider
Copy previously saved values to Identity Provider Info attributes as the following:
- Name - Unique Name - internal to IT-Conductor
- Description - Internally identifying information
- Issuer - Identity Provider Identifier
- SSO URL - Login URL
- SLO URL - Logout URL
- Certificate - exported base64 certificate
Service Provider Info attributes allow to customize the mapping between Identity Provider and IT-Conductor, normally you don't need to do anything as default mappings should work. Otherwise contact IT-Conductor support team for assistance
Click again to insert the Identity Provider
When done the Identity Provider should show in the list
Identity Providers
You now can use the SSO to login into IT-Conductor from your Identity Provider
Last modified 2mo ago