SAML SSO gives users a centralized and secure way of controlling access to their organizations. When you join an organization that uses SAML SSO, you sign in through the organization's IdP and your existing Survicate account is linked to an external identity that belongs to the organization.

Please note, that this article is created for universal purpose. Once you need OneLogin or Okta help specifically, please visit specific links.

Getting started

Before you start you need to make sure you are the owner of your organization. Please go to Settings > 🔑SAML Authentication and click Enable SAML authentication toggle. Leave the tab open, as you'll need the data from here.

Identity Provider (IdP) setup

In your Single Sign-On provider, add a new app:

In  SAML Settings, you will likely be asked to provide Single sign on URL /ACS (Consumer) URL and Audience URI

You can find Single sign on URL under ACS (Consumer) URL in Survicate:

While Audience URI is the same URL, but it has a different ending: /metadata instead of /acs.
So if your Single sign on URL or ACS (Consumer) URL is:

Your Audience URI will be:

Go to the SSO provider's configuration page with Single Sign-On URL, Provider Issuer and X.509 Certificate:

Survicate setup

In Survicate SAML Authentication tab paste the Provider Issuer to Issuer field, Single Sign-On URL to Sign on URL and X.509 Certificate to Public certificate.

Once you click "Save" you will get a list of recovery codes. Please save them; you will need those to bypass the Single Sign-On when you don't have access to SAML provider anymore. 

Did this answer your question?