Generic SAML

Warning
Only workspace administrators can configure SSO.
Hint

Read these documents to learn how to configure an integration with a specific SAML provider:

Generic SAML SSO configuration

Follow these steps to configure SSO for any SAML-compliant identity provider:

  1. Sign in to your Buddy workspace as an administrator, go to Workspace SettingsSSO, and switch to SAMLCustom.

    Alternatively, use these links for cloud and self-hosted versions respectively:

     https://app.buddy.works.com/WORKSPACE_URL_HANDLE/workspace/sso
     https://INSTANCE_URL/WORKSPACE_URL_HANDLE/workspace/sso
  2. Copy the values from these fields in Buddy and set them in your SAML-compliant identity provider:

    • SP Entity ID / Audience URI
    • ACS / SP Assertion Consumer Service / Single Sign-On URL
  3. Find these values in your identity provider and set them in Buddy:

    • SSO URL / SAML Endpoint / Identity Provider Single Sign-On URL
    • Issuer
    • Certificate

Workspace SSO configurationWorkspace SSO configuration

  1. Click Test configuration and enable the SSO on success. Buddy will redirect you to the SSO provider's login page.
  2. Sign in to authenticate and enable SSO in your workspace.
Warning
If Buddy is unable to connect to the identity provider, make sure that both the signature and the digest methods match those used by the provider (some providers do not use the most popular RSA-SHA256 / SHA256 methods).
Last update:
Sep 20, 2024