Enterprise Help Centre

How to configure SSO

Enabling Single Sign-On (SSO) for your staff allows them to log into Felix using their single set of corporate credentials.

Getting started

Configuring and implementing SAML SSO will require the involvement of your IT team. Both your identity provider and Felix account will need to be configured to allow users access to Felix.

Warning: Changes to SAML can impact the access your users have to Felix. Users should be made aware of any changes ahead of time.

Tip:  Whilst configuring SSO its a good idea to have both Felix and Microsoft Azure open as you will need to copy and paste information between these pages.

Enable SSO in Felix

Before you can set up your SSO account, you must first enable SSO for your organisation.

To enable SSO within Felix:

  1. Navigate to https://auth.okfelix.com
  2. Log in using the configuration user details that you have been provided
  3. Navigate to Settings > Single Sign On
  4. Check the Enable Single Sign-On checkbox
  5. Click the blue Update Configuration button

Configure your identity provider (Azure)

To configure your identity provider:

  1. Open Microsoft Azure Active Directory
  2. Navigate to the Enterprise Applications page
  3. Create a new application
  4. Configure the application to use SAML 2.0
  5. Copy the Azure AD Identifier from Azure to the Identity Provider Entity ID field within Felix
  6. Copy the Login URL from Azure to the Identity Provider SSO URL field within Felix
  7. Download the Base 64 SAML Signing Certificate

Configure SSO within Felix

To configure SSO within Felix you are required to enter values which are generated by your identity provider.

To configure SSO within Felix:

  1. Open the Base 64 SAML Signing Certificate in a text editor (e.g. Notepad)
  2. Copy the certificate into the Public x509 Certificate field within Felix
  3. Copy the SP Entity ID from Felix to to Identifier (Entity ID) field within Azure     
  4. Copy the SP Assertion Consumer Service URL from Felix to the Reply URL (Assertion Consumer Service URL) field within Azure     
  5. Click the blue Update Configuration button

Warning:  Do not log out of Felix at this step to ensure you are able to test your configuration correctly.

Tip:  The SP Entity ID field may also be known as the Audience URI.

Tip:  The SP Assertion Consumer Service URL may also be known as Single Sign On URL.

Testing your SSO configuration

As soon as you have configured SSO for Felix you will be able to try logging in with your corporate credentials.

To test your SSO configuration:

  1. Open a new incognito tab or private browsing window     
  2. Navigate to https://auth.okfelix.com/
  3. Log in to Felix using your corporate credentials
  4. Confirm that you are logged in correctly and that you have the correct permissions

Warning:  Do not log out of your account when testing your SSO configuration. Ensure that SSO is operating as expected in an incognito window or alternate web browser to prevent losing access to your account.

Tip:  To open an incognito tab in the Google Chrome browser press CTRL + SHIFT + N on your keyboard. For Firefox and Edge browsers you can use the shortcut CTRL + SHIFT + P to open a private browsing window.

Was this article helpful?
Need further assistance?Contact Support