Configuring SAML SSO for Shufflrr

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Shufflrr.

Prerequisite

1. Log in to ADSelfService Plus as an administrator
2. Navigate to  Configuration → Self-Service → Password Sync/Single Sign On → Add Application, and select shufflrr from the applications displayed.
   Note: You can also find shufflrr application that you need from the search bar located in the left pane or the alphabet wise navigation option in the right pane.
3. Click IdP details in the top-right corner of the screen.
4. In the pop-up screen that appears, note down the value of Login URL and download the SSO ceritificate by clicking Download Certificate

Shufflrr (Service Provider) configuration steps

1. Now, log in to your Shufflrr administrator account.

2. Navigate to Admin → Settings → SAML Single Sign-On.

   

3. Under Authentication, Enable SAML Single Sign-On authentication type.

   

4. Under SAML Single Sign-On, in the Identity Provider Issuer ID and Single Sign-On Service URLs, enter the Login URL value that you had saved in Step 4 of Prerequisite.

   
5. In the Identity Provider Certificate field, upload the certificate downloaded in Step 4 of Prerequisite.
6. Click Save.

ADSelfService Plus (Identity Provider) configuration steps

1. Now, switch to ADSelfService Plus’ Shufflrr configuration page.
2. Enter the Application Name and Description.
3. In the Assign Policies field, select the policies for which SSO need to be enabled.
   Note:ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your shufflrr account. For example, if you use johndoe@thinktodaytech.com to log in to shufflrr, then thinktodaytech.com is the domain name.
6. In the SP Identifier field, enter the domain name in the URL. For example, if the Shufflrr URL is http://thinktodaytech.Shufflrr.com, then thinktodaytech is the SP Identifier.
7. In the Name ID Format field, choose the format for the user login attribute value specific to the application.

Note: Use Unspecified as the default option if you are unsure about the format of the login attribute value used by the application

8. Click Add Application.
9. Your users should now be able to sign in to Shufflrr through ADSelfService Plus.