Using OneLogin for SSO with Showpad

Showpad offers a SAML-based Single Sign-On (SSO) service that allows users to use their organization's credentials to access Showpad. It simplifies your users' lives with fewer usernames and passwords, as there's only one account to remember.

This article describes how you can set up SSO for Showpad using OneLogin as the Identity Provider (IDP). OneLogin users are mapped to Showpad users by email address.

Key features

• Users can access Showpad with their OneLogin account
• Auto-provision & assign users to the right groups in Showpad
• Reduce security threats to sensitive data loss
• Centralized user, password, and authorization management

You need this to succeed

• Platform Enterprise on Showpad
  (also available as an add-on on Showpad Plus pricing plan)
• Administrator access on both Showpad's Online Platform and OneLogin
• Basic OneLogin knowledge 
• Unique users in OneLogin

The quick way to awesomeness

1. Create a new SAML custom connector app in OneLogin
2. Download the OneLogin SAML metadata
3. Enable SSO on Showpad's Online Platform
4. Paste the XML metadata from OneLogin in the Showpad SSO configuration
5. Choose SHA-256 as the Hash Algorithm
6. Copy the Showpad Entity ID, Assertion Consumer Service Endpoint, and Single Logout Service Endpoint
7. Configure the new OneLogin app with the Showpad data
8. Log in with your OneLogin account

Do this step by step

1. Navigate to the Applications tab in your OneLogin administrator panel.
2. Click Add App and search for SAML Custom Connector (Advanced).
   
3. Choose a suitable display name for the setup (e.g: Showpad SAML) and click Save.
4. Open the More Actions dropdown menu and download the SAML Metadata.
5. Go to the Sign-on section in the Admin Settings of your Showpad organization.
6. Click Add Configuration and provide an appropriate name (e.g: OneLogin SSO) along with the SAML 2.0 protocol.
   
7. Paste the contents of the downloaded metadata XML in the Metadata XML field and choose SHA-256 as the Hash Algorithm. If preferred, you can enable auto-provisioning by ticking the checkbox.
8. Click the info button of your newly added configuration in the Single Sign-on overview.
   Copy the Showpad Entity ID, Assertion Consumer Service Endpoint, and Single Logout Service Endpoint.
   
9. Open the application you've created earlier in the OneLogin administrator panel.
10. Select the Configuration tab, apply the following values and click Save:
    • Audience (EntityID): <paste Showpad Entity ID>
    • Recipient: https://<your-organization>.showpad.biz/sso/asc
    • ACS (Consumer) URL Validator: ^https:\/\/<your-organization>.showpad.biz\/sso\/asc?service-id=<your-service-id>$ (Modified Assertion Consumer Service Endpoint)
    • ACS (Consumer) URL: <paste Assertion Consumer Service Endpoint>
    • Single Logout URL: <paste Single Logout Service Endpoint>
      
11. Additionally, In case you want to enable auto-provisioning, the following actions are required. Open the Parameters tab. The field value pair NameID value -> Email should be present already. Add the following case-sensitive pairs and click Save:
    • email: Email
    • firstname: First Name
    • lastname: Last Name