Configuring SAML SSO for Shufflrr

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Shufflrr.

Prerequisite

Log in to ADSelfService Plus as an administrator
Navigate to Configuration → Self-service → Password Sync/Single Sign-On.
Search for Shufflrr and select it.
In the SSO/SAML Details pop-up screen that appears, note down the value of Login URL. We will need these values in a later step.
Click Download SSO certificate. We will need this in a later step.

Shufflrr (Service Provider) configuration steps

Now, log in to your Shufflrr administrator account.
Navigate to Admin → Settings → SAML Single Sign-On.
Under Authentication, Enable SAML Single Sign-On authentication type.
Under SAML Single Sign-On, in the Identity Provider Issuer ID and Single Sign-On Service URLs, enter the Login URL value that you had saved in Step 4 of Prerequisite.
In the Identity Provider Certificate field, upload the certificate downloaded in Step 5 of Prerequisite.
Click Save.

ADSelfService Plus (Identity Provider) configuration steps

Now, switch to ADSelfService Plus’ Shufflrr configuration page.
In the Domain Name field, enter the domain name of your email address. For example, if you use johndoe@shufflrr.com to log in to Shufflrr, then shufflrr.com is the domain name.
In the SP Identifier field, enter the domain name in the URL. For example, if the Shufflrr URL is http://thinktodaytech.Shufflrr.com, then thinktodaytech is the SP Identifier.
Enter a Description for the connection.
In the Available Policies field, select the policies for which you wish to enable single sign-on.
Click Save.
Your users should now be able to sign in to Shufflrr through ADSelfService Plus.

For Shufflrr, both IdP-initiated and SP-initiated flows are supported.