Steps to configure SAML SSO for Figma
About Figma
Figma is a leading collaborative design tool that enables teams to create, prototype, and share user interface (UI) designs in real time. As a browser-based application, it allows users to work from anywhere without the need for installation, making it accessible to a wide range of professionals including designers, product managers, and developers.
The following steps will help you enable single sign-on (SSO) for Figma from Identity360.
Prerequisites
- The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications.
- Log in to Identity360 as an Admin, Super Admin, or Technician with a role that has Application Integration and Single Sign-on permissions.
- Navigate to Applications > Application Integration > Create New Application, and select Figma from the applications displayed.
Note: You can also find Figma from the search bar located at the top.
- Under the General Settings tab, enter the Application Name and Description.
- Under the Choose Capabilities tab, choose SSO, then click Continue.
General Settings of SSO configuration for Figma.
- Under Integration Settings, navigate to the Single Sign On tab, then click Metadata Details. Copy the Login URL and Entity ID. Download the Signing Certificate by clicking on Download next to the Signing Certificate field. This will be used later during the configuration of Figma.
Integration Settings of SSO configuration for Figma.
Figma (service provider) configuration steps
- Open Figma in the file browser and select Admin in the left pane.
- Select Settings at the top left of the portal.
- In the Log in and provisioning section, click SAML SSO.
- In the Identity provider section, select Other.
- In the IdP Entity ID field, enter the Entity ID copied in step 6 of the prerequisites.
- In the IdP SSO Target URL field, enter the Login URL copied in step 6 of the prerequisites.
- Upload your Signing certificate downloaded in step 6 of the prerequisites, then click Review.
- Check the box to confirm This information is correct... and then click Configure SAML SSO.
- Click the Copy link next to your Tenant ID. You'll need this to complete the set up process in Identity360.
Identity360 (identity provider) configuration steps
- Switch to Identity360's application configuration page.
- Enter the Tenant ID copied in step 9 of Figma configuration. For example, if your Figma URL is https://valescorp.figma.com, then valescorp is the tenant name.
- Enter the Relay State parameter, if necessary.
Note: Relay State is an optional parameter used with a SAML message to help you remember where you were or to direct you to a specific page after logging in.
- Click Save.
Integration Settings of SSO configuration for Figma.
- To learn how to assign users or groups to one or more applications, refer to this page.
Your users will now be able to sign in to Figma through the Identity360 portal.
Note: For Figma, both SP-initiated and IdP-initiated flows are supported.
Steps to enable MFA for Figma
Setting up MFA for Figma using Identity360 involves the following steps:
- Set up one or more authenticators for identity verification when users attempt to log in to Figma. Identity360 supports various authenticators, including Google Authenticator, Zoho OneAuth, and email-based verification codes. Click here for steps to set up the different authenticators.
- Integrate Figma with Identity360 by configuring SSO using the steps listed here.
- Now, activate MFA for Figma by following the steps mentioned here.
How does MFA for applications work in Identity360?