Skip to main content

IT Administrators: SAML Configuration

Emily Yeomans

The SAML Configurations page allows authorized IT Administrator role assignees to manage Single Sign-On (SSO) settings and Identity Providers (IdPs) directly in the Cayuse Admin application.

Please note: Cayuse Support must perform the initial SAML configuration. Please submit a ticket via the Cayuse Help Center to get started.

Accessing SAML Configurations

  1. Go to Admin


     
  2. Navigate to More, and then select Configurations.


     
  3. Select the SAML Configurations tab (only visible to IT Administrator role assignees).

Configuring SAML Options

  1. Action buttons: 
    • Cancel
    • Save
    • Add New (add another label configuration)
  2. Enable Guest Account: Default = toggled to Yes. When not enabled, only users authenticated through your IdP can access Cayuse.
  3. Add 'Guest/External User' Option to login screen: Default = toggled to No. When enabled, all users are directed to a unified login screen to choose a login method.
  4. IdP Configurations:
    • Label (Required): The name shown for the login option(s) on the sign-in page.
    • Custom Logout URI: The web address routed to after log out.
    • Customer Error URI: The web address used if a login or SSO error occurs.
    • Trash can icon: Delete entire label
  5. Force Re-Authentication: Default = No. When enabled, users must authenticate again rather than automatically signing in with an existing IdP session.
  6. Configurations (select a metadata option)
    • Metadata URL: After Cayuse loads the IdP metadata from the specified URL, the Reload Metadata on Next Login button becomes available. Selecting this button invalidates the IdP metadata currently stored by Cayuse. The next login attempt reloads the metadata from the configured URL. Selecting Reload Metadata on Next Login does not affect any active user sessions.

This page also displays the date and time Cayuse last loaded your IdP metadata. This information appears below the Metadata URL field. If the metadata has not yet been loaded or has been invalidated, Metadata not yet loaded is displayed instead.

  • Metadata File upload
  • InCommon Federation Entity ID

Completed Setup

Similar to the example below, users will see your specific configured options during login.



 

Related articles