Single Sign-On (SSO) is a way for users to log into multiple applications with a single user ID and password without having to re-enter their credentials. The SAML standard allows identity providers to pass credentials to service providers. LogicalDOC can be configured to act as a SAML 2.0 Service Provider (SP).
Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP), like Okta, to pass authorization credentials to service providers (SP), like LogicalDOC.
In simpler terms, it means you can use one set of credentials to log in to many different sites. With a SAML identity provider account, you can log in to LogicalDOC and other sites securely with the same account.
The main benefit is that it helps administrators centralize user management by controlling which sites users have access to with their SAML identity provider credentials.
LogicalDOC supports using a single metadata file to retrieve configuration information for the Identity Provider. The IdP metadata XML file contains the IdP certificate, the entity ID end the redirect URL.
Benefits of this feature
- Single Sign-On. Users can log in to LogicalDOC with their SAML credentials
- Centralized identity management. LogicalDOC accounts automatically pull user attributes from SAML upon login, such as full name, email, and username
- Automatic account provisioning. LogicalDOC user accounts are automatically created the first time a user signs in with their SAML credentials
For more information see the Manual Page.
