Articles in this section
SAML Support in Vtiger CRM
Table of Contents
Introduction
Security Assertion Markup Language or SAML helps identity providers (IDPs) pass credentials to service providers (SPs). You can use a single set of credentials to log in to different software, websites, or applications.
To read more about SAML, click here.
Vtiger supports Single Sign-On via SAML-based identity providers.
What is Single Sign-On
Single Sign-On or SSO is a type of authentication that allows users to log in to multiple applications using one set of login credentials. Opting for SSO sheds the burden of maintaining separate usernames and passwords for each software off your shoulders.
Feature Availability
|
|
|
|
| |
| |||||
|
|
|
|
|
|
Enabling SAML Login
To log in via your SAML server, you must add Vtiger as a service in your SAML-based IDP and simultaneously configure SAML in Vtiger.
Since each one of us might use a different IDP, let’s take the example of OneLogin to enable SAML login in Vtiger.
Follow these steps to enable SAML login in Vtiger using OneLogin:
Step 1: Enable SAML login in Vtiger.
- Log in to your CRM account.
- Click the User Menu on the top right corner of the CRM screen.
- Click Settings.
- Look for the User Management section.
- Select Authentication.
- Click the Edit icon on the Authentication page.
- Enable the checkbox beside SAML.
|
Step 2: Perform the OneLogin setup.
- Log in to OneLogin.
- Click the Applications tab.
- Select Applications.
- Click the Add App button.
- Search for SAML Test Connector using the search bar.
- Select SAML Test Connector (IdP w/ attr w/ sign response).
- Set up a display name, icon, and other basic details.
- Click Save.
Step 3: Set up SAML in Vtiger.
|
- Click the SSO tab in OneLogin.
- Click View Details under X.509 Certificate in OneLogin.
- Copy the certificate and paste it into X.509 Certificate in Vtiger.
- Copy the following from OneLogin and paste them in Vtiger:
- Issuer URL into IDP Entity ID
- SAML 2.0 Endpoint (HTTP) into IDP SSO URL
- SLO Endpoint (HTTP) into IDP SLO URL
- Click Save in Vtiger.
- Click the Configuration tab in OneLogin.
- Copy the following from Vtiger and paste them in OneLogin:
- SP ACS URL into ACS (Consumer) URL Validator
- SP ACS URL into ACS (Consumer) URL
- Insert a backslash (\) before each forward-slash (/) in ACS (Consumer) URL Validator to make it a regular expression.
- Click Save.
|