Configuring SAML SSO for LiquidPlanner

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and LiquidPlanner

Prerequisite

LiquidPlanner (Service Provider) configuration steps

1. Now, log in to your LiquidPlanner administrator account.

2. Click your User Profile picture at the top-right corner of the screen, and select Settings. 

3. From the left-hand navigation, select Single Sign On Configuration.

   

4. Select Configuration.

5. Choose a unique subdomain for custom login. This value will serve as the SP Identifier while configuring LiquidPlanner in ADSelfService Plus. Note down this value.

6. In the Fingerprint field, enter the Fingerprint value you had saved in Step 5 of Prerequisite.

   

7. In the Remote Login URL, enter the Login URL value you had saved in Step 5 of Prerequisite.

8. In the Logout Landing URL, enter the Logout URL value you had saved in Step 5 of Prerequisite.

9. Click Save.

10. After you configure your SSO settings, you must test them. Select Test URL to do this.

11. Once your test is successful, go to Enable SSO.

    

12. Change the radio button from No to Yes if you want to enable SSO for your workspace.

13. Click Save.

14. After setting up SSO, you need to configure your LiquidPlanner members’ behavior.

    a. Determine if you would like the all workspace members to be using SSO at the same moment by selecting Yes for Enable SSO for All Members.

    b. Determine if you would like all new workspace members automatically to be set up with SSO required by selecting Yes for Enable SSO for All New Members by Default.

    c. To move one member at a time, or a group of members, into SSO Enabled, select them from the SSO Disabled box and use the >> arrows to move them to SSO Enabled. Alternatively you can move everyone at once with the Move All => button.

15. Once done with selections, click Save.

ADSelfService Plus (Identity Provider) configuration steps

1. Now, switch to ADSelfService Plus’ LiquidPlanner configuration page.

2. In the Domain Name field, enter the domain name of your email address. For example, if you use johndoe@thinktodaytech.com to log in to LiquidPlanner, then thinktodaytech.com is the domain name.

3. In the Account ID field, enter the unique subdomain you saved in Step 5 of LiquidPlanner configuration.

   

4. Enter a Description for the connection.

5. In the Available Policies field, select the policies for which you wish to enable single sign-on.

6. Click Save.

   Your users should now be able to sign in to LiquidPlanner through ADSelfService Plus.

   For LiquidPlanner, both IdP-initiated and SP-initiated flows are supported.

---