How to Integrate Schedly with SAML Based SSO

Overview

Schedly supports integration with SAML-based Single Sign-On (SSO) systems to provide secure and streamlined authentication for users. By setting up SAML SSO, organizations can manage user access centrally, enhancing security and simplifying the login process. This guide will help you configure SAML SSO for your Schedly account, ensuring that your team can access Schedly using their existing organizational credentials.

Prerequisites

• Administrative access to your Schedly account and SAML Identity Provider (IdP).
• An active Schedly subscription that includes access to SSO integrations (available on the Pro Plan and above).
• Configuration details from your SAML Identity Provider, including the IdP URL, Issuer URL, and X.509 certificate.

Step-by-Step Instructions

Configuring SAML SSO in Schedly

1. Access the Schedly Login Page: Open your web browser and navigate to the main Schedly login URL.
2. Sign In to Your Admin Account: Use your email and password to log in, or select "Sign in with magic link" if enabled.
3. Go to Organization Settings: Once logged in, click on the "Settings" gear icon in the main navigation menu.
4. Access SSO Configuration: Under the "Organizations" section, select your organization name, and click on "SSO Configuration."
5. Enter IdP Details:
   • IdP URL: Enter the URL provided by your Identity Provider.
   • Issuer URL: Input the issuer or entity ID from your Identity Provider.
   • X.509 Certificate: Upload the certificate file or paste the certificate string provided by your IdP.
6. Save Configuration: Click on the blue Save button to apply your SAML settings.
7. Test the Integration: After saving, use another browser session to test the "Sign in with SAML/OIDC" option on the Schedly login page.
8. Verify Successful Login: If correctly configured, you should be redirected to the Schedly dashboard upon successful authentication.

Key Details & Limits

• Plan Requirement: SAML SSO is available on the Pro Plan and above.
• Maximum Security: Enhances account security by allowing centralized control over login credentials and multi-factor authentication.
• Supported Identity Providers: Major providers like Okta, OneLogin, and Microsoft ADFS are supported.
• Configuration Need: Requires administrative setup both in Schedly and the SAML Identity Provider.

Frequently Asked Questions

1. What if my IdP does not provide an X.509 certificate?

   • The X.509 certificate is essential for secure communication. Contact your IdP for obtaining or generating it.

2. Can I use SAML and email/password authentication simultaneously?

   • Yes, users can log in using either method, providing flexibility alongside security.

3. What happens if the SAML configuration is incorrect?

   • Incorrect configurations will prevent users from logging in via SSO. Double-check the IdP URL and certificate.

4. Is it possible to disable email/password login once SAML is configured?

   • Yes, for increased security, you can disable other login options in the settings.

5. How can I ensure only certain users access Schedly through SAML?

   • Restrict access to Schedly by configuring user roles and permissions in your IdP.

Troubleshooting

• SAML Login Fails: Double-check the IdP URL and ensure the issuer URL matches the one configured in your Identity Provider.
• Users not redirected back to Schedly: Ensure that your IdP is set to redirect users to the correct Schedly response URL.
• Certificate Mismatch Error: Verify the integrity and correctness of the X.509 certificate.

Related Topics

• How to Manage User Permissions in Schedly: Learn about configuring roles and permissions for users.
• Understanding Schedly's Pro Plan Features: Explore the comprehensive feature set available under the Pro Plan.
• Troubleshooting Login Issues in Schedly: Detailed solutions for common login problems.