SAML Single Sign-On

SAML Single Sign-On (SSO)

SSO, or Single Sign-On, allows individuals to use a single set of identifying credentials to sign up and sign on to a variety of different websites and SaaS (Software as a Service) platforms.

Most people are familiar with SSO from Sign Up with Google, a feature that allows you to use your Google credentials to sign up and log in to many websites, including Moqups.

Single Sign-On with SAML goes a step further and allows the employees of an organization to use a single set of credentials to log on to a variety of websites and apps they may need for their work.

SAML (Security Assertion Markup Language) is the open standard that allows identity providers (IDP) like OneLogin, Okta, Microsoft Azure AD or Google to pass authorization credentials to service providers (SP) like Moqups. If you want, you can also configure a Custom SAML single sign-on for IDPs that aren’t on that list.

Once SAML is enabled for your Moqups account, users can use SSO by simply entering their email at the SAML login. Moqups then authenticates their credentials via the IDP – and they can begin using our app.

You can also set up automatic provisioning with SCIM (System for Cross-domain Identity Management). SCIM allows IT departments to automate their user identity management process within an IDP. To set up SCIM you will need to generate an API token in Moqups, and then add this to your IDP. You’ll find instructions for each of our supported IDPs below.

To set up a SAML integration, you’ll need Admin privileges for both Moqups and your chosen IDP. 

Moqups Admins also have the option of requiring their team members to use an SSO option, either via Sign up with Google or one of the SAML providers listed below.

OneLogin SAML configuration

Please follow these steps to configure OneLogin SAML for your Moqups account:

1. Once signed into OneLogin, select the SSO tab for the Moqups app.
2. In the Issuer URL field, copy the identity provider metadata.
3. Click here to log into Moqups and go to the Integration tab on your Dashboard’s Account page. 
4. In the SAML Authentication section of your Integration tab, paste the identity provider metadata URL copied during Step 2 and click the Configure button.
5. Your configuration is now complete.

Okta SAML configuration

Please follow these steps to configure Okta SAML for your Moqups account:

1. Once signed into Okta, select the SSO tab for the Moqups app.
2. Click the Identity Provider metadata link to open a new tab containing the issuer URL
3. Copy the URL from the address bar of the tab that opened during Step 2
4. Click here to log into Moqups and go to the Integration tab on your Dashboard’s Account page.
5. In the SAML Authentication section of your Integration tab, paste the identity provider metadata URL copied at Step 3 and click the Configure button.
6. Your configuration is now complete.

Microsoft Azure AD SAML configuration

This section provides an overview and the steps required to configure SAML authentication for  Moqups and Microsoft Azure AD.

Contents

Supported Features

Requirements

Step-­by-­Step Configuration Instructions

Custom SAML configuration

If your preferred identity provider doesn’t offer the ability to connect with Moqups, you can use the following information to set up a custom SAML connection.

Contents

Requirements

Parameters to configure

Considerations to keep in mind

Settings to include

<saml:Attribute 
  NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" 
  Name="FirstName">
    <saml:AttributeValue 
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
        xsi:type="xs:string">
           FIRST NAME
    </saml:AttributeValue>
</saml:Attribute>

<saml:Attribute 
  NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
  Name="LastName">
    <saml:AttributeValue 
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:type="xs:string">
        LAST NAME
    </saml:AttributeValue>
</saml:Attribute>

Certificates

Log In to Moqups with SAML/SSO

Once the SAML integration has been configured, your users can use SSO to log in to Moqups:

1. Go to https://my.moqups.com/saml-login
2. Enter your email address
3. Click Log in

Enforce SSO Authentication

In order to provide an additional layer of security, Moqups admins (team owners) can require all their team members to use an SSO option, either via Google or one of the SAML providers above. 

Enabling the Enforce SSO Authentication option means that password-only login will be disabled for all team members.

To enforce SSO authentication for your team: 

1. Go to the Accounts window of your Dashboard
2. Click on the Security tab 
3. In the Enforce SSO Authentication section, set the Enforce SSO Authentication for your team toggle to the ON position.
4. Confirm your choice by pressing the Continue button in the pop-up.