Single Sign-On Implementation Guide

Today’s businesses use an average of 37 different tools to run their day-to-day operations, making user authentication and authorization a major challenge. 
Your team needs secure access to the tools they rely on, and your business requires a secure way to manage accounts from one protected location. Enter Single Sign-on: one of the most important security capabilities for any cybersecurity strategy. 
It’s always been our priority to provide a product that’s secure and scalable for brands of any size. Now we’re releasing SAML Single Sign-on (SSO) to create a fast, easy, and secure login experience. 

Simplified Login with SSO 

SAML SSO lets users log in to CleverTap (and many other cloud-based business applications) with their corporate credentials. Your team will have fewer passwords to remember, and your IT department will save time creating, activating, managing, and deleting accounts as your company grows. 
SSO also improves the security of your login credentials, since IT admins can manage all employee info in a central corporate directory that can’t be accessed by any of the other tools you use.  

How Single Sign-on Works

There are three major components of SSO:

1. User
   The end-user who is logging into the app by providing credentials to the Identity Provider. 
2. Identity Provider (IdP)
   In order to provide the identity of the user who is trying to access the app, an Identity Provider sends authentication data to the Service Provider along with the user’s access rights for the app.
3. Service Provider (SP)
   This is the app providing service to users. The app receives authentication info from the identity provider in order to grant access to the user. In this case, CleverTap is the service provider.

Why did we choose SAML for our SSO protocol? 
As a leading industry standard, SAML is one of the most widely used SSO protocols. Developed in 2001, it’s also the most mature protocol and one of the few that is supported by all major identity service providers. 

Setting Up SAML SSO for Your Account

For users wanting to activate single sign-on for their account, setting up SAML SSO requires you to open both your IdP and SP providers and follow the instructions listed. 
Once you’re set up, add users in your IdP. Those users will then be able to sign in to CleverTap. 
If you have any questions, our support team will be happy to help you out.