SSO (Single sign-on) / SAML setup
FeatureHub SaaS comes with an option to setup SSO/SAML for your organisation. This is an optional setting that an organization owner (super admin) can configure for their account. You are not required to pay any extra amount for setting up SSO/SAML.
Azure AD SSO/SAML setup
-
Create FeatureHub application in the "Enterprise Applications" page and go to the Single Sign-On setup screen.
-
Provide the following URls in the Basic SAML configuration section. Note, we used "banana" here as an example, this is usually your organisation name:
-
Provide the following additional details in Attributes & Claims section:
-
Make sure the correct option is selected for the certificate setting:
-
Copy the following URLs and a certificate and insert them in your FeatureHub Saml/SSO settings page. Suffix field is usually your organization name:
Certificate example
-
Once you save the settings, copy the Sign In URL from the page, this will be where your users should go to sign in.
Google IDP SAML/SSO setup
-
Follow steps 1-5 here
-
Provide the following details on the Google Identity Provider Page:
-
ACS URL: https://app.featurehub.io/saml/your-company-name/sso
-
Entity ID: https://app.featurehub.io/saml/your-company-name/metadata
-
Start URL: https://app.featurehub.io/saml/your-company-name/auth
-
Note: "your-company-name" value should be the same as "suffix" value when you provide SSO setup details on the FeatureHub settings.
-
-
-
Check the box: "Signed response"
-
Provide additional information on the Name ID and EMAIL attributes
-
Click on "Download metadata"
-
In the opened window, copy SSO URL, Entity ID and Certificate
Go to the FeatureHub app - SAML settings page and paste it to the FeatureHub SAML form for your organisation:
If you don’t want to add users from your organisation with permissions to access FeatureHub app automatically, you can uncheck the box "Automatically add new registered users" -
Once you save the settings, copy the Sign In URL from the page, this will be where your users should go to sign in.