Configuring SAML SSO for BaseCRM

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and BaseCRM

Prerequisite

Log in to ADSelfService Plus as an administrator.
Navigate to Configuration → Self-service → Password Sync/Single Sign-on.
Search for BaseCRM and select it.
Click Download SSO Certificate link in the top-right corner of the screen.
In the SSO/SAML Details pop-up screen that appears, note down the values of Login URL and FingerPrint. We will need these values in a later step.

BaseCRM (Service Provider) configuration steps

Now, log in to your BaseCRM administrator account.
Click on your profile picture present at the topright corner and click Settings.
In the left pane, click Single Sign On.
In the Single Sign On page, click Configure.
Note down the UUID value. This will serve as the Account ID while configuring BaseCRM with ADSelfService Plus.

Scroll down and select Manual setup.

In the Identity Provider Issuer ID and Identity Provider SSO URL fields, enter the Login URL value you had copied in Step 5 of Prerequisite.
In the Identity Provider certificate fingerprint field, enter the FingerPrint value you had copied in Step 5 of Prerequisite.
Click Save.

ADSelfService Plus (Identity Provider) configuration steps

Now, switch to ADSelfService Plus’ BaseCRM configuration page.
In the Domain Name field, enter the domain name of your email address. For example, if you use johndoe@thinktodaytech.com to log in to BaseCRM, then thinktodaytech.com is the domain name.
In the UUID field, enter the UUID value you had copied in Step 5 of BaseCRM configuration.
Enter a Description for the connection.
In the Available Policies field, select the policies for which you wish to enable single sign-on.

Click Save.

Your users should now be able to sign in to BaseCRM through ADSelfService Plus.

For BaseCRM, both IdP-initiated and SP-initiated flows are supported.