Adding Single Sign-On (SSO) to Your Criteria Account
Updated
by
Sean Welch
Criteria provides your users with the ability to sign in via Single Sign-On (SSO). We are able to integrate with any SAML 2.0-compliant IdP.
With SSO enabled, your users will be able to sign into your organization’s Criteria account through the identity provider (IdP) of your choice.
Please note that access to Single Sign-On may depend on your Criteria subscription's inclusions. To confirm you are on the right platform or to discuss upgrading, please contact your Customer Success Manager.
If you are unfamiliar with some of these terms, you can check out our Frequently Asked Questions page here.
Enabling the SSO Integration
This process will require admin access to your chosen IdP. If you do not have IdP admin access these instructions can be sent to your technical team who does (e.g. IT, Cyber Security, Network admin, etc.).
Setting up your SSO with Criteria involves just four steps:
- Configure your IdP.
- Send the Metadata file to Criteria.
- Criteria soft-enables the integration.
- SSO integration is hard-enabled.
- Optional: Enforced-enablement may be enabled.
1. Configure your IdP
Click on the relevant set-up guide for your Single Sign-On (SSO) provider below. You or your IdP Admin will need to configure your IdP as per the instructions listed in this guide.
2. Send the Metadata file to Criteria
The set-up guides above includes the information Criteria will need to set up the integration for your Criteria account.
Once you have configured your IdP, you will need to email your Metadata file to our Customer Support Team to begin the process of enabling the SSO integration for your account.
3. Criteria soft-enables the integration
Initially, we will soft-enable SSO for your Criteria account. We will provide you with a custom login URL, which will include a "login with <SSO Provider>" button. This will enable you to get your SSO provider to authenticate.
When soft-enabled your users will be able to test that the SSO is working, but still maintain access using their Criteria account login credential (email and password) or they can log in via your SSO (the custom login URL) to test that it is working.
If you have any queries regarding this step in the process, or would like some assistance with troubleshooting any problems, please reach out to our Support team for assistance.
4. Hard-enablement is set
Once you are satisfied that the SSO is functioning correctly, please advise our Support team.
We will then hard-enable the SSO. At this point, SSO will be the only way your users can log into Criteria.
As an admin user for your Criteria account when your SSO has been hard-enabled, you will still be able to log in using your username and password, for troubleshooting purposes.
5. Optional: Enforced-enablement may be set
Enforced enablement can be set once hard-enablement has been completed. Please advise our Support team if you would like to implement this option.
When enforced enablement has been selected, no users will be able to log in with username and password.
Logging in to your Criteria account via SSO
To log in, use the login URL for your Criteria account. This will be provided to you in step 3.
Use your login credentials for your SSO profile to log in to your Criteria account.
Adding and updating users
You will need to keep a record of your custom login URL so you can add new users to your Criteria account in the future.
Click here to learn how to do this. This How To Guide also provides information about deactivating users who no longer require access to your Criteria account.
