To enable SSO you will need to complete the steps within Scaffold and your Identity Provider.
Within Scaffold, navigate to the Admin settings from the navigation menu, then select SSO. Once on the SSO page, select the New Identity Provider link.
In the Create Identity Provide page, select the Authentication Protocol.
Based on the Authentication Protocol selection, the settings available and the required information needed will be displayed.
Adjust the settings as needed in Scaffold.
Navigate to your Identity Provider and complete the required steps.
Enter the information provided by your Identity Provider into Scaffold.
Click the Save button.
After clicking Save, the SSO will be created and can take up to 5 minutes to be authenticated and ready for use. When logging in once SSO is ready, you will continue to use the same URL that was previously used for logging in (e.g. institution.k16.io/login).
You will also want to ensure all current and new user accounts in Scaffold are also assigned accordingly within your Identity Provider.
Note
For SAML Authentication Protocol, please ensure that you provide the name for the element that will provide the value of the users email address, that can be found within the XML content.
e.g. http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
If this can not be found, please provide the mapped name for the attribute that was used to assign the user email value.
If an error occurs when the SSO is created, you can use the backdoor login to gain access to your Scaffold instance (e.g. institution.k16.io/direct-login)