SAML Authentication: SP Intiated SSO

Service Provider (SP) initiated SSO involves the SP creating a SAML request, forwarding the user and the request to the Identity Provider (IdP), and then, once the user has authenticated, the SP gives access to the user . This flow would typically be initiated by a login button or URL within the SP.

To set up SP Intiated SSO for your QuestionPro account, please follow the steps below:

• Go to My Account >> Global Settings
• Under the SSO Authentication section, select SAML(Signed) as the authentication mode.

• Download the SP Metadata and upload it into your IDP SSO app.
• Get the IDP metadata and upload it into your QuestionPro account by using the Metadat URL or Metadata File option
• Click on Save Changes.
• Add an attribute with name emailAddress and value as user's email address which will be used to locate the QuestionPro account for the user.
• The setup is completed. Now, use the co-branded login portal URL to view the new button named Login via SSO which will allow the user to login to their QuestionPro account via the IDP credentials.

Note: If Restrict login to SSO option is enabled then the user will be redirected to the IDP login page otherwise the user will be able to see the QuestionPro organization login portal with Login via SSO button.

Please contact your respective account representative to enable the co-branded login portal for your QuestionPro organization. Your account representative will enable the portal and help you with the co-branded login portal URL.

Almost all the IDPs supporting SAML for SSO authentication do support SP initiated SSO, following are the names of some most popular IDPs which support SP initiated SSO authentication:

• Microsoft Azure
• Oracle
• Okta
• Ping Indentity

There are some Identity Providers(IDPs) which support the unsigned SP metadata along with the SP certificate to setup the SP initiated SSO connection but other IDPs support a single signed metadata to be uploaded on IDP end to setup the SSO connection.