The following documentation is specific to setting up Single Sign-On (SSO) for Alchemer Mobile. Please refer to this document for information on SSO for Alchemer Survey or Alchemer Workflow.
Are you already using an Identity Provider (IdP) to manage logins and access to the various systems your employees need? If so, you can now include Alchemer Mobile as a Service Provider (SP) for Single Sign-On (SSO).
At this time, we support SAML 2.0 SSO with Identity Providers such as Active Directory Federated Services (AD FS), Azure (AD FS), Okta, Auth0, OneLogin, and Ping Identity.
With Alchemer, you can use SSO to authenticate users into the Alchemer Mobile application. The following tutorial will cover this option.
Before You Get Started, You Will Need:
- An Identity Provider like Okta, Auth0, etc.
- The x509 certificate from your Identity Provider.
- The sign-on URL from your Identity Provider.
SSO Setup Overview
1. To start the process, reach out to Alchemer Support directly and request initial provisioning for Alchemer Mobile Single Sign-On.
2. Your CSM will then provide you with an SSO Provisioning Form.
3. After you complete the provided form, you will receive a series of URLs needed to complete SSO set-up. Additionally, you will receive a link to a meta-data file with the necessary attribute statements.
4. Using the provided URLs and meta-data, follow the set-up steps in the links below for your selected Identify Provider:
Attribute Statements
In the metadata file, pay particularly close attention to the 'name' and 'email' attribute statements. You must provide these attribute statement names when completing SSO setup with your Identity Provider.
These attribute statements are required for setting up SSO for Alchemer Mobile, even if they are listed as optional by some Identity Providers.
Example from Okta SSO Setup
