Single sign-on (SSO) is a user authentication service that permits a user to use one set of login credentials (e.g. name and password) to access multiple applications. The benefits of SSO include a simplified login process, enhanced user experience, increased security, and reduced password fatigue.

The SSO feature allows for a streamlined, secure login environment, leveraging SAML (Security Assertion Markup Language) 2.0 protocols.

How SSO works

Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP). When a user attempts to access a service, they are redirected to their identity provider (IdP) to authenticate. Upon successful authentication, the IdP redirects the user back to the service with a SAML assertion granting them access.

Prerequisites

• Ensure you have administrative access to your identify provider (IdP).
• Familiarize yourself with the user base and authentication processes of your organization.

Configure Your Identity Providers

1. Log into your IdP and set up a new application for SSO.
2. Configure SAML settings as per your IdP’s guidelines. This will typically include setting up an Assertion Consumer Service (ACS) URL, Entity ID and other additional fields.
3. Generate the necessary SAML metadata.

Contact Support for SAML Configuration on TabaPay Portal

1. With the SAML metadata from your IdP ready, contact TabaPay support to configure SSO on the portal side.
2. Email [email protected] with the subject line “SSO Configuration Request for TabaPay portal”
   Include the following details in your request:
   1. Your organizations name and Client ID(s)
   2. The SAML metadata obtained from your IdP
3. The TabaPay support team will assist in setting up and validating the SSO integration with your portal.
4. If there are any issues regarding your setup, the TabaPay team will be in touch.
5. You will receive a confirmation email once the setup is complete and ready for testing.

Testing and Validation

1. After receiving confirmation from the support team, conduct a test login to verify the SSO configuration. Test logins only can be done with an existing TabaPay user login.
2. Ensure that user accounts in the TabaPay portal are correctly linked to their corresponding IdP accounts.
3. Report any issues or inconsistencies to the support team for troubleshooting and resolution.

Contact TabaPay for questions.