Set up Single Sign-On for Showpad Value Factory

SAML 2.0 Single Sign-On (SSO) gives Showpad Value Factory administrators a unified sign-in experience when they access Value Factory (value.showpad.com). This article explains what to prepare, how to configure and test the SAML connection, and how to manage it safely over time.

Note: Showpad Value Factory SSO is configured separately from Showpad SSO. Even if your organization already uses SSO for Showpad, you need to configure it again for Showpad Value Factory.

See how it looks

You need this to succeed

The quick way

1. Sign in to Value Factory.
2. Navigate to Settings and select Authentication.
3. Enable Single Sign-On (SAML 2.0) and click Save.
4. Click + Add Configuration.
5. Enter a friendly Name for the configuration.
6. Select Metadata XML or Metadata URL and provide the required information
7. Enter the SAML settings.
8. Select a Hash Algorithm.
9. Indicate where the user’s identity is located.
10. Select session settings (auto-provisioning, IdP logout).
11. Select Test Connection.
12. Click Save Configuration.

Do this step by step

Enable SAML 2.0

1. Sign in to Value Factory (value.showpad.com).
2. Navigate to Settings and select Authentication.
3. Enable Single Sign-On (SAML 2.0).
4. Select Save.

Back to top

Add the SAML configuration

1. Select + Add Configuration.
2. Enter a friendly Name for the configuration.
3. Select the Identity Provider Metadata source:
   • Metadata XML: Paste the XML from your identity provider, then select Parse. The remaining SAML fields are populated automatically.
   • Metadata URL: Enter the URL from your identity provider, then select Fetch & Parse. The remaining SAML fields are populated automatically.
4. Enter the SAML settings
   • Entity ID: A unique identifier for the identity provider. It tells Showpad Value Factory which IdP is sending the SAML assertion.
   • SSO URL: The identity provider's sign-in endpoint. Showpad Value Factory redirects users here when they initiate SSO login.
   • SLO URL (optional): Single Log-Out URL. The identity provider's sign-out endpoint. When configured, logging out of Showpad Value Factory also triggers a sign-out request to the IdP. If not provided, logout only ends the local session.
   • X.509 Certificate: The identity provider's public key certificate. Showpad Value Factory uses it to verify that SAML responses actually came from your IdP and haven't been tampered with.
5. Select a Hash Algorithm:
   • SHA-1: An older hash algorithm. Still supported but considered less secure. Use only if your identity provider does not support SHA-256.
   • SHA-256: The recommended hash algorithm. More secure than SHA-1 and supported by all modern identity providers.
6. Specify the user’s identity location:
   • Identity resides in the NameID element of the subject
   • Identity resides in the Attribute element. If selected, enter the attribute name.
7. Select session settings:
   • Auto-provision accounts for new users: Automatically creates value.showpad.com accounts when users sign in via SSO for the first time. Select a default role for new users from the dropdown menu.
   • Log out from IdP when logging out from Showpad Value Factory: Signs users out of the identity provider when they log out of the app.
8. Click Test Connection to verify your selections.
9. Click Save Configuration.

Back to top

Maintain the configuration

Certificate renewal

Plan certificate renewal before the expiration date shown in your configuration. Replace the certificate, run Test Connection, save, and test again in a private browser session.

Adding new administrators

When you add a new administrator, confirm they have a linked SSO identity before they attempt to sign in. See 3. Configure and manage administrator access and roles.

Back to top

Troubleshooting