Single sign-on (SAML SSO)

Why SAML ?

SAML (Security Assertion Markup Language) facilitates single sign-on (SSO) by securely exchanging authentication data between applications. Configuring SAML is vital for enhancing security, simplifying user access across systems, and ensuring compliance with industry standards. It minimizes password fatigue, reduces the risk of credential theft, and promotes efficient identity management. So, here’s a user guide for enabling SAML on :

How to Enable SAML on your Beamer App

Step 1: Configure Your Identity Provider Details in Beamer

1. Go to your Beamer account and navigate to Settings > Security.

2. Under the SAML Identity Provider configuration section, fill in the details of your SAML Identity Provider.

    

   - For Quick Setup: If your IdP provides a metadata URL, simply copy and paste that URL under the IdP Metadata URL field, then save. For instance, I obtained the Metadata URL from Auth0 IDP as shown below.

  – For Full Setup: If no metadata URL is provided, copy and paste the values for the IdP Entity ID, IdP Single Sign-On URL, and IdP Certificate from the IDP to Beamer as shown below.

Step 2: Add Beamer as a Service Provider in Your SAML IdP

1. Depending on your IdP, different details from your SAML SP (Beamer) might be required. You’ll find all of these under the SAML Service Provider details section.

2. Click on each detail to copy and add Beamer as a Service Provider in your SAML Identity Provider settings as shown below.

Step 3: Obtain the Login URL

1. Once steps 1 and 2 are completed, SAML SSO should be ready to go for your Beamer account.

2. Your team must log in using the SAML login URL, which you’ll find under the SAML login URL section.

3. Share this URL with your team and inform them that SAML is now set up for your account.

Optional:    

Step 4: Enable Force Single Sign-On

1. Under the Single Sign-On section, you’ll find an option to force SSO in your account.

2. If you enable this option, all your team members will be able to sign into your Beamer account only through your SAML SSO configuration.

One SSO method per account

A Beamer account can only be linked to one SSO method at a time. If a user previously signed in with Google SSO and the workspace is later configured for SAML, the user must first disconnect Google SSO before they can log in through the SAML provider.

To switch from Google SSO to SAML, go to Account Settings > Desynchronise Google SSO, then sign in again using the SAML provider. If the previous SSO method isn’t removed, users may be unable to authenticate through the new provider.

Troubleshooting: SSO stopped working

If SSO was working and then suddenly stops, work through these checks:

• Expired IdP certificate. Update the certificate (or re-import the metadata URL) under Settings > Security.

• IdP metadata changed. If your entity ID, Single Sign-On URL, or certificate was rotated, re-paste the metadata URL or update the values in Beamer.

• Re-test the connection. Sign in through your SAML login URL in a private or incognito window to confirm the fix.

• Still stuck? Contact our support chat and we’ll help investigate.

And that’s it! Your SAML SSO is live and running. This article is part of our FAQ (Frequently Asked Questions). If you have a question that’s not included in our Help Center feel free to contact our support chat by clicking the button at the bottom left corner of the screen.