Question 1

SSO - General Tutorial

Accepted Answer

SSO - Home > General Tutorial

Single Sign On (SSO) allows the user to log into Steeple without having to use a new password. It also allows just-in-time provisioning, that is, automatically creating a user in your community at the first login.

However, if you use JIT, users will not be prompted to log via SSO on each visit. Administrators should delete them manually when needed.

Configuring your Identity Provider

Q: SSO - General Tutorial

SSO - Home > General Tutorial Single Sign On (SSO) allows the user to log into Steeple without having to use a new password. It also allows just-in-time provisioning, that is, automatically creating a user in your community at the first login. However, if you use JIT, users will not be prompted to log via SSO on each visit. Administrators should delete them manually when needed. Configuring your Identity Provider For the moment, administrators are not able to configure SSO on the platform. You should send an email to security@steeple.fr with this information : 1 - Your XML idp metadata file (or one by one fields : certificate or thumbprint, idp entity ID, sso target url, your name id format …) 2 - Your Steeple community And we will send you back the service provider information. Some notes : Prefer persistent name id format ( urn:oasis:names:tc:SAML:2.0:nameid-format:persistent ) because it is used as a unique key in Steeple and it should not change when an employee have their name changed for example. We support idp-initiated login, and sp-initiated login Just-in-Time provisionning will be automatically enabled, meaning a steeple account will be created at first login If a user is already logged in Steeple, and create a SAML login, it will not create a new Steeple account but it will merge both accounts. It is

Q: SSO - Azure Active Directory

SSO - Home > Azure Active Directory This is a step-by-step Tutorial for integrating Azure Active Directory as an Identity Provider for Steeple (through SAML authentication and Just In Time provisioning). All applications => New application (Enterprise Applications) : Create your own application => Enter "Steeple" and click on Create : Set up single sign on : SAML : upload metadata file (You can find it on Steeple : "administration" -> "settings" -> "configure access methods" -> "Download xml file") : Click on add then save Configure the mapping, choose a unique name id , we will use it to identify a user so it should never change. You can use persistent objectid for example. Then configu

Q: SSO - G Suite

SSO - Home > G Suite This is a step-by-step Tutorial for integrating G Suite as an Identity Provider for Steeple (through SAML authentication and Just In Time provisioning). 1 - Add Steeple as a SAML App in G Suite choose : SETUP MY OWN CUSTOM APP : Download option 2 -> IDP Metadata , we will use it later : You can find the logo here : Fill ACS with : https://www.steeple.fr/idp/xxx/SAML2/POST and Entity Id with https://www.steeple.fr/idp/xxx/SAML2 , we will modify it later Choose Name ID Format persistent Configure the mapping this way : 2 - Send an email to security@stee

Q: SSO - Okta

SSO - Home > Okta This is a step-by-step Tutorial for integrating Okta as an Identity Provider for Steeple (through SAML authentication and Just In Time provisioning). Login as an admin and click on "Applications" and then on "Add application" here : Then click on "Create New app" : Choose "Web" and "SAML 2.0" : Configure it like this : (you can find the logo here ) : On this webpage : Fill it with those placeholder values for the moment. You will complete the configuration with the real values (instead of xx ) later. Single sign on URL : https://www.steeple.fr/idp/xx/SAML2/POST Audience URI (SP Entity ID) : https://www.steeple.fr/idp/xx/SAML2 Name ID Format : persistent Do not download the Certificate on the right. You should fi

For the moment, administrators are not able to configure SSO on the platform.

You should send an email to security@steeple.fr with this information : 1 - Your XML idp metadata file (or one by one fields : certificate or thumbprint, idp entity ID, ssotargeturl, your name id format…) 2 - Your Steeple community

And we will send you back the service provider information.

Some notes :

Prefer persistent name id format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent) because it is used as a unique key in Steeple and it should not change when an employee have their name changed for example.
We support idp-initiated login, and sp-initiated login
Just-in-Time provisionning will be automatically enabled, meaning a steeple account will be created at first login
If a user is already logged in Steeple, and create a SAML login, it will not create a new Steeple account but it will merge both accounts.
It is

Question 2

SSO - Azure Active Directory

Accepted Answer

SSO - Home > Azure Active Directory

This is a step-by-step Tutorial for integrating Azure Active Directory as an Identity Provider for Steeple (through SAML authentication and Just In Time provisioning).

All applications => New application (Enterprise Applications) :

Create your own application => Enter "Steeple" and click on Create :

Set up single sign on :

SAML :

upload metadata file (You can find it on Steeple : "administration" -> "settings" -> "configure access methods" -> "Download xml file") :

Click on add then save

Configure the mapping, choose a unique name id, we will use it to identify a user so it should never change. You can use persistent objectid for example.

Then configu

Question 3

SSO - G Suite

Accepted Answer

SSO - Home > G Suite

This is a step-by-step Tutorial for integrating G Suite as an Identity Provider for Steeple (through SAML authentication and Just In Time provisioning).

1 - Add Steeple as a SAML App in G Suite

G Suite step 0

choose : SETUP MY OWN CUSTOM APP :

G Suite step 1

Download option 2 -> IDP Metadata, we will use it later :

G Suite step 2

You can find the logo here :

G Suite step 3

Fill ACS with : https://www.steeple.fr/idp/xxx/SAML2/POST and Entity Id with https://www.steeple.fr/idp/xxx/SAML2, we will modify it later Choose Name ID Format persistent

G Suite step 4

Configure the mapping this way :

G Suite step 5

2 - Send an email to security@stee

Question 4

SSO - Okta

Accepted Answer

SSO - Home > Okta

This is a step-by-step Tutorial for integrating Okta as an Identity Provider for Steeple (through SAML authentication and Just In Time provisioning).

Login as an admin and click on "Applications" and then on "Add application" here :

Okta step 0

Then click on "Create New app" :

Okta step 1

Choose "Web" and "SAML 2.0" :

Okta step 2

Configure it like this : (you can find the logo here) :

Okta step 3

On this webpage :

Okta step 4

Fill it with those placeholder values for the moment. You will complete the configuration with the real values (instead of xx) later.

Single sign on URL : https://www.steeple.fr/idp/xx/SAML2/POST Audience URI (SP Entity ID) : https://www.steeple.fr/idp/xx/SAML2 Name ID Format : persistent

Do not download the Certificate on the right.

You should fi

Question 5

All articles are available in french

Accepted Answer

Hello,

This article has been made to inform you that every articles of our help center are available in french.

You need to switch the language in french to be able to access to all the articles.

If you encounter difficulties understanding articles in french, don't hesitate to contact the support chat.

We'll help you in english then :)

Question 6

SSO Home

Accepted Answer

Single Sign On (SSO) allows the user to log into Steeple without having to use a new password. It also allows just-in-time provisioning, that is, automatically creating a user in your community at the first login.

How to configure SSO?

Please contact your Steeple coach in order to active the "SSO test mode". Then you will be able to configure it, and check that the mapping is working. We need at least the email, the firstname and lastname attributes.

When it works you can contact your Steeple coach again to activate it.

General Tutorial : Click here Specific Tutorial for Azure Active Directory : Click here Specific Tutorial for GSuite : Click here Specific Tutorial for Okta : Click here

When SSO is enabled, this features will be available :

Login through Identity provider-initiated SSO

For example, in Azure Active Directory, users can go to http://myapps.microsoft.com/, and access to Steeple in one click :

GSuite :

Service provider-initiated SSO : reserved url

Every customer have

Frequently Read Articles

Browse All Categories