Setting up SAML v2 SSO
We're not limited to only Google and Okta, we do support setup with any IdP. We just don't have the documentation to walk you through other IdP's but please send us the necessary information so we can manually enable SSO for you:
- 1.Identity Provider SSO URL
- 2.Identity Provider Issuer
- 3.Certificate (Download this and send as an attachment to your Vitally contact)
Q: Do you support SAML just-in-time provisioning?
A: Yes, Vitally supports SAML just-in-time provisioning. When a user logs in for the first time using SAML, a user will created for them in Vitally. If you've added the vitallyRole attribute, that will determine the user's permission level in Vitally. Otherwise, they will default to being a 'restricted' user.
Q: Will users be able to login with a password anymore?
A: No, password login is disabled as soon as SAML 2.0 login is enabled.
Q: Will SAML login go into effect immediately?
A: Existing user sessions will be valid for up to 7 days. Ask each of your users to log out and log back into Vitally to force them to immediately start using SAML login.
Q: Where do I invite new team members once SAML is enabled?
A: The ability to invite team members to join Vitally has been disabled within the Vitally app. Any new Vitally access will need to be provisioned through your SSO provider.
Last modified 5mo ago