Configuring SAML SSO for Small improvements

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Small improvements.

Prerequisite

Small improvements (Service Provider) configuration steps

1. Login to Small improvements with an administrator’s credentials.

2. Navigate to Administration → Integration → SAML SSO..

3. Enable SAML SSO.

4. Paste the URL, copied in Step 5 of Prerequisite, in the Application Issuer URL and HTTPS Logout URL field.

5. Open the downloaded certificate as a text file. Copy and paste the content it in the X.509 Certificate text field.

6. Enable Allow login using password method. 

7. Click Save.

ADSelfService Plus (Identity Provider) configuration steps

1. Now, switch to ADSelfService Plus’ Small-Improvements configuration page.

2. In the Domain Name field, enter the Domain Name of your email address. For example, if you use johndoe@small-improvements.com to log in to Small improvements, then small-Improvements.com is the domain name.

3. Enter the SP Identifier of your Small-Improvements account in the SP Identifier field. For Example: https://<sp_identifier>.small-improvements.com

You are required to request for a sub-domain name. To place a request: Navigate to Administration panel → Advanced settings → Sub domain Request.  

4. Provide a Description in the respective field.

5. In the Available Policies field, click on the drop-down box and select the policies for which you wish to enable single sign-on.

6. Click Save and log out of ADSelfService Plus.

For Small Improvements, both SP and IDP initiated flows are supported. You are required to avail a sub domain name before proceeding with configuration.

---