Single Sign-On (SSO) allows you to authenticate using your organisation's Identity Provider (IdP) such as Microsoft Entra, Google, or Okta instead of managing their password in ELMO. This provides several benefits:
For Organisations: Reduced operational burden - deactivating a user in your IdP prevents terminated users from accessing ELMO
For Employees: Improved usability through a simplified login flow with fewer passwords to remember
For Security: Enhanced security through centralised authentication management
Prerequisites
Have either Company Admin role or the IT Admin Security Profile
The SSO module must be enabled for your organisation
Access to your Identity Provider's (IdP) administration portal
Disable any active adblockers to receive in-app guidance
How to setup the IT Admin Security profile
1. Navigate to Administration → General → Security Profile → Add Profile
2. Select the IT Admin security profile, enter a name and description and click Save
3. Click the Users tab and enter the first name and last name of the user you want to grant access and click Save
4. Click the Summary tab and review the users, click Confirm
Single Sign-On (SSO) Configuration Setup
1. Navigate to Administration → General → SSO Setup
2. Select the Setup and follow the instructions using the on-screen Setup Guide
📝 Skip to step 5 to start the SSO Configuration if you're already familiar with setting up an SSO Configuration
3. Once you click Setup Guide a pop-up box will appear and Select your Identify Provider. Choose from:
Microsoft Entra
Okta
Google
AD FS
4. Further information can be found when selecting your Identifier provider such as Identifier (Entity ID), Reply URL (Assertion Consumer Service URL) and Logout URL (Optional). A Setup Guide is available as well.
📝 If you're having any issues accessing the setup guide via the pop-up, click link for the Download setup Guide
Click the following to access further information on the setup process for your IDP.
5. SAML Configuration - Copy the provided URLs from this section to paste into your IdP's configuration.
6. IDP Metadata - has two available options:
Recommended: Enter your IdP metadata URL and click "Fetch"
Alternative: Manually enter the XML
7. Matching Attribute
For Microsoft Entra ID: Select the appropriate attribute from the dropdown list
For other IdPs: Manually enter your attribute
8. Click Save & Test Config to validate your setup.
If successful, SSO will be marked as active with a message confirmation
If unsuccessful, an error message will display. Reference the IdP-specific setup guides for troubleshooting
Configuring Login with SSO
1. Navigate to Administration → General → SSO Setup
2. Select the Configuration tab
3. SSO Login - Enabling this setting to display a "Continue with SSO" button on the login page and this must be enabled before any other settings can be configured. A preview on how the login screen appears when attempting to login
4. SSO Auto Redirect - When enabled, users will be automatically redirected to login with SSO when they arrive at the login page.
Wait before redirect: Select 0-9 seconds (default: 1 second). Determines the amount of time a user will wait before they're redirected. If all your users login using SSO, set this to a low number. If you have some users that need to login with a username and password, consider extending this number or disabling auto redirect.
Message before redirect: Customise the message displayed during auto-redirect.
5. SSO Sign Out - When enabled, displays a sign out button for users logged in with SSO
Sign out logs out IdP: Attempts to sign out of the IdP (if the IdP permits and has been configured with single sign out)
Sign out redirect to URL: Redirects to the specified URL after signing out (if the IdP permits)
Troubleshooting
If you encounter issues during setup:
Ensure your IdP metadata URL is correct and accessible
Ensure that the user has been given permission to ELMO in your IdP
Verify the matching attribute corresponds to what's configured in your IdP
Check that the appropriate SAML configuration has been entered into your IdP
Review any error messages displayed after testing the configuration
For further assistance, please contact ELMO Support.