Configuring SAML SSO for Humanity

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Humanity.

Prerequisite

Login to ADSelfService Plus as an administrator.
Navigate to Configuration → Self-service → Password Sync/Single Sign-on.
Search for Humanity and select it.
Click Download SSO Certificate link in the top-right corner of the screen.
In the SSO/SAML Details pop-up that appears, copy the login URL and download the SSO certificate by clicking on the Download SSO Certificate link.

Humanity (Service Provider) configuration steps

Login to Humanity with an administrator’s credentials.
Navigate to Settings → Integration → Single sign on.
Enable SAML
Paste the URL, copied in Step 5 of Prerequisite, in the Issuer URL and Remote Logout URL field.
Open the downloaded certificate as a text file. Copy and paste the content it in the X.509 Certificate text field.
Click Save.
Copy the SAML Login URL , we will need it in later steps.

ADSelfService Plus (Identity Provider) configuration steps

Now, switch to ADSelfService Plus’ Humanity configuration page.
In the Domain Name field, enter the domain name of your email address. For example, if you use johndoe@thinktodaytech.com to log in to Humanity, thinktodaytech.com is the domain name.
Enter the SAML Redirect URL you had saved in Step 7 of Humanity configuration.
Provide a Description in the respective field.
In the Available Policies field, click on the drop-down box and select the policies for which you wish to enable single sign-on.
Click Save and log out of ADSelfService Plus.

For Humanity, both SP & IDP initiated flows are supported.