Page Comparison

...

1. Click SSO Enabled

2. Add email domains we wish to target within the Email Identifiers input

   1. I.E: yourdomain.com

3. For the email attribute mapping add http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier

4. Fill in MetadataURI with your given Issuer URL similar to:

   1. https://app.onelogin.com/saml/metadata/520af980-2a08-48f1-8f6c-a94bb83682d1

5. Optionally Enable Single Sign-out workflows (SSOut)

   1. This allows session termination (logout) to call our IdP. When a user logs off of Core Strengths Platform, the platform will request a best-effort “sign-out of all-applications” to your IdP.

6. Now Click Save

Once a CoreStrengths Platform account has been configured for SSO, people can navigate to the login page directly without first proceeding to the platform. The Login URL field will be very similar to the following (replacing the identity_provider value with one provided to you by CoreStrengths)

• https://core-cloud-prod.cognito.corestrengths.com/oauth2/authorize?redirect_uri=https://app.corestrengths.com&response_type=code&client_id=126et73iduc4j5gcs4lfcg9lur&identity_provider=PROVIDER_NAME&scope=email%20openid%20profile

This Hosted SSO Link (example above), specific for your organization, can be found on the Account → Settings page, under the SSO chunk. See below for an in-page location hint.

...