This article applies to:
Admins
Premium Procurement
Estimated time: Less than 15 mins
About this article
Enable your employees to sign in to Vendr using Single Sign-On (SSO). This article covers creating a custom SAML integration and connecting your SSO provider to Vendr.
How it works
When you use the SSO SAML integration employees will be prompted to log in to Vendr using single-sign-on instead of magic links. SAML provides a quick and secure method of passing user authentications and authorizations between your identity provider and Vendr.
Benefits
Increase security by centralizing user access to Vendr through your SSO provider
Provide a quick and seamless way for employees to log into Vendr – no magic links required.
Requirements
Vendr Admin
SSO Provider Super Admin
Note
Installing the SSO integration does not sync users to Vendr for assigning steps in workflows. To sync users to Vendr you'll also need to configure an Identity Provider or HRIS integration.
Overview
To allow employees to log in to Vendr using your SSO provider, you will:
Create SAML Application
To kick this off, we'll begin in your SSO provider's admin area. First, create a New Application. Choose the Web for Platform, and SAML 2.0 for the Sign on method. Click Create to continue.
Next enter "Vendr" as the App name, and please feel free to include our logo pre-sized. Click Next to proceed to SAML Settings.
Here, there are two main steps: adding key information provided by Vendr, and providing Vendr with your metadata and cert file. In a new window, navigate to Vendr's SSO Settings page. Select "Custom" as your SSO provider, and you'll be provided with two key pieces of information: the Single sign on URL and an Audience URI. Copy and paste each of those two values into their respective fields back in your SSO tab. You can leave all the other inputs as is, and click Next to continue.
It may ask you if you are publishing a new app.
Click Finish to proceed.
The last step is to get the
Metadata.xmlcontent from your new application.Click View Setup Instructions and scroll to the bottom of the page.
You should see an "Optional" section, that includes a text area that contains an XML document.
Download the document
Return to your browser tab with Vendr SSO Settings, open the XML document, and copy/paste the text from inside the document into the Identity Provider XML field in Vendr's SSO Setup page.
Click Submit to complete the setup.
Enable SSO in Vendr
Navigate to Vendr and select admin and then SSO
Select Custom as the SSO Provider
Upload the downloaded metadata file from the previous step to Metadata XML field
Click Submit
🎉 Congrats! Your integration is now connected.
TIP
Vendr doesn't automatically support IdP-initiated logins. Users will be prompted to log in through SSO when users log in directly from Vendr.
To enable users to login to Vendr directly from the IdP dashboard add the following URL as an application bookmark:
https://app.vendr.com/#/login?via=saml&domain=YOUR_DOMAIN