How do I set up Single Sign-On?

Single Sign-On (SSO) is a feature of Enterprise plans and is also available to non-enterprise plan customers as a low cost add-on feature. Prior to setting up SSO you are expected to currently use an Identity Provider (IdP) and the necessary permissions to create and configure a new app integration within the IdP. The SSO setup process will differ between different IdPs but the following steps should cover most of the configuration.

1. Log into the Addressfinder portal using the regular login pathway.
2. Navigate to the Single Sign-On page.
3. Click the Configure Single Sign-On button.
4. Within your IdP, create a new app integration and select the SAML 2.0 sign-in method.
5. Name your new app so that it can easily be found and updated in the future. Something like Addressfinder Portal access might be good.
6. Copy the Service Provider Entity ID (sometimes referred to as Audience Restriction or Audience URI) from the Addressfinder portal into your IdP's new app settings.
7. Copy the Sign-On URL from the Addressfinder portal into your identity provider's settings.
8. Copy the Reply URL (sometimes referred to as Assertion Consumer Service URL) from the Addressfinder portal into your identity provider's settings.
9. Set "Application username" to "Email".
10. Save/finish the new app.
11. Go back into the app and copy the Metadata URL. Paste this into the Metadata URL field in Portal and click Enable SSO.
12. Assign users to the new app. Important: The email addresses used in the IdP must exactly match the email address used in the All Users page of the Addressfinder portal.

Before logging out of the portal, it might be wise to ask another Addressfinder User, who is setup within the IdP to have access to the portal, to attempt to log into the portal as a test.