Single Sign-ON (SSO) with SAML 2.0
ParkMyCloud supports the ability to configure Single Sign-On (SSO) with Security Assertion Markup Language (SAML) 2.0. With SSO, users are able to enter a URL into their browser window that will redirect them to your Identity Provider (IdP).
User Management
When configuring your SSO environment, your organization's SuperAdmin user can delegate certain users who sign in through SSO to be Team Leads, and then assign those Team Leads to certain teams. Once a user is a Team Lead, they can add other users who sign in through SSO to their teams to be Team Members, who can then access the resources on that team.
Once there, they may then sign in using their Identity Provider (IdP) login information for authentication. If authentication is successful, an account for ParkMyCloud will be created and the user will be redirected to the Resources Screen. After the initial sign-on, they will be able to use the URL to sign in and access ParkMyCloud as needed.
Users may continue to access ParkMyCloud until their authentication token has expired for the Identity Provider or IdP. Single Sign-ON is supported for the following Identity Providers:
- Azure Active Directory
- Active Directory Federation Services (ADFS) - See https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-custom-apps
- Google Apps (i.e. G-Suite)
- Centrify
- Okta (In the Okta App Network)
- OneLogin (In the App Catalog)
- Ping Identity (In the App Catalog)
For more detailed information about Security Assertion Markup Language (SAML) 2.0, please click here.
Single Sign-On (SSO) may only be configured by users who have been assigned the Super Admin role.
Getting Started
Essentially, to configure SAML you need to swap the following information between the Service Provider (SP, in this case, ParkMyCloud) and your Identity Provider (IdP).
To configure SAML, specific information must be swapped between the Service Provider or SP (ParkMyCloud) and the Identity Provider (IdP). For the Service Provider, this will include the following:
- SP User Login URL
- SP ACS URL
- SP Entity ID
For the Identify Provider (IdP), this will include one of the following:
- IdP Metadata URL
- IdP Metadata File
- IdP Sign-In URL, IdP Entity ID, and X509 Certificate
Mappings would be the following:
- User Email ↔ NameID
- FirstName ↔ First Name - Optional for some IdP's
- LastName ↔ Last Name - Optional for some IdP's
The trick is to know where to find this information in ParkMyCloud and in your particular Identity Provider.
For more information about setting up SSO for a specific Identity Provider, please use the following link: https://mysupport.parkmycloud.com/portal/helpcenter/parkmycloud-inc/saml-sso.
For more information about configuring these settings and getting users logged in, please see the following pages: