User Guide Cancel

Configure single sign on

 

You can integrate Adobe Connect with a SAML 2.0-based identity provider (for example, Okta) to provide secure identity management and single sign-on (SSO) services. To enable SSO, configuration changes are required both at the identity provider (IDP) side and the Adobe Connect server.

To enable SSO:

  1. Configure the IDP: You must configure your Adobe Connect account as a service provider prior to setting up SSO in Connect Central
    1. Set the SAML recipient and SAML audience parameters for the service provider profile as <Connect_ACCOUNT_URL>/saml/cps.
    2. In the SAML Name ID field, specify email address as the user identifier in SAML exchanges.
    3. Add  the custom attributes firstname and lastname to the profile. The attributes are passed in the SAML response.
    4. Save the changes.
  2. Enable SSO in Connect Central:
    1. Go to Admin > Users and groups > SSO settings.
    2. Check Enable SSO.
    3. Specify the IDP type.
    4. Specify your domain.
    5. Import your IDP metadata file. (See example below)
  3.  Select Save.
  4. Contact Adobe Connect Customer Care to provision SSO authentication in your Adobe Connect account. If you are using on On Premise Server, contact your IT admin.
IDP metadata file example
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<EntityDescriptor entityID="<ADOBECONNECT_ACCOUNT_URL>/saml/cps"
xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
<SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format: emailAddress</NameIDFormat>
<AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<ADOBECONNECT_ACCOUNT_URL>/saml/cps"/>
</SPSSODescriptor>
</EntityDescriptor>

   

SSO configuration panel

Get help faster and easier

New user?