How Do I Set up Single Sign on (SSO) with SAML 2.0?

Key Team Members:

In order to set up SSO, a Loopio Administrator will need to approve the change in authentication method.

You’ll need one technical contact, to spearhead your SSO implementation and work with the Loopio team. This contact will need access to make updates to your organization’s QA/UAT/Test and production environments through the Identity Provider (IdP).

You’ll also need at least one contact with a Loopio license for testing authentication in your Loopio account.

Loopio is compatible with third-party identity federation systems that adhere to the SAML 2.0 standard. For example:

• Microsoft Active Directory Federation Services
• Azure AD
• Okta

Technical Details

• Certificate Strength: SHA256
• Name ID format: EmailAddress
• Response Signed: Yes
• Assertion Signature: Yes
• Signature Algorithm: RSA-SHA256
• Digest Algorithm: SHA256
• Assertion Encrypted: Yes
• Encryption Algorithm AES256-CBC

Setting up SSO with SAML 2.0

Reach out to our Support Team to let us know you’re ready to set up SSO with SAML 2.0.

In your message please provide:

• The Identity Provider (IdP) you are using
• Email addresses of a few Users who can test authentication
• Your QA/UAT/Sandbox metadata

From there the following steps will be taken:

1. The Loopio Technical Contact and your Technical Contact will exchange QA/UAT/sandbox metadata
2. The Loopio Technical Contact will configure SSO in a Loopio QA environment and notify you when we are ready to begin testing
3. Once you receive the notification from the Loopio Technical Contact, test your SSO connection in the QA/UAT/Sandbox environment:
• Go to your company’s Loopio QA URL (provided by the Loopio Technical Contact)
  • You’ll be redirected back to your IdP (Identity Provider)
• Log in to the IdP
• Click at least 3 pages in Loopio
  • For example, Projects, Reviews, Library
4. Once we’ve confirmed that SSO is functional, the Loopio Technical Contact and your Technical Contact will exchange production metadata to set up SSO in production

If your team is already logging into Loopio via username and password, we’ll coordinate a time to switch authentication to SSO for your account to avoid any service interruptions for your team members. If your team is not using Loopio yet, we will set authentication to SSO for your account.