Prerequisites

Before you begin, ensure you have the following:

Configure SAML Settings

Basic SAML Configuration

Start by configuring the basic SAML settings in your Cloudairy workspace.

1. 1. Navigate to SSO Configuration : Go to the Enterprise Admin portal and click on "SSO Configuration" in the sidebar.
   Path: Enterprise Admin → SSO Configuration
2. 2. Set Account Name : Enter a unique account name for your SAML connection.
   Field: Account Name

   Example: cloudairy-saml, company-sso
3. 3. Select Identity Provider : Choose your identity provider from the dropdown menu.
   Options: Microsoft Entra, Okta, Google Workspace, JumpCloud, One Login

Set Up Identity Provider

Configure Your IdP

Configure your identity provider with Cloudairy's SAML service provider details.

Cloudairy SAML Service Provider Details

Use these details when configuring Cloudairy as a service provider in your identity provider:

Identity Provider Configuration Steps

1. Log into your identity provider admin console
2. Add Cloudairy as a new SAML application
3. Enter the Entity ID and ACS URL provided above
4. Download the SAML metadata or certificate

Configure User Provisioning

Automatic User Management

Configure automatic user provisioning to streamline user onboarding and management.

1. 1. Enable JIT Provisioning : Toggle on "Enable Just-in-Time (JIT) Provisioning" to automatically create users when they first log in.
   Benefit: Users are automatically created in Cloudairy when they first authenticate via SSO
2. 2. Set Default Team : Select the default team for new users who are automatically provisioned.
   Options: Choose from existing teams in your workspace
3. 3. Configure Organization Discovery : Set the domain for automatic organization discovery based on user email addresses.
   Example: If set to "company.com", users with @company.com emails will be automatically associated

Test & Enable SSO

Final Configuration Steps

Complete the SSO setup by testing the configuration and enabling SSO for your workspace.

1. 1. Test SSO Configuration : Test the SAML configuration to ensure everything is working correctly.
   Test: Try logging in with a test user account
2. 2. Enable Require SSO : Toggle on "Require SSO" to enforce SSO authentication for all users.
   Warning:

   This will disable email/password login for all users. Ensure SSO is working correctly before enabling.

3. 3. Save All Changes : Click "Save All Changes" to apply your SSO configuration.
   Button: Purple "Save All Changes" button at the bottom of the page