Prerequisites
Before you begin, ensure you have the following:
Admin Access: You must have admin access to the ProcureDesk application.
Okta Account: A working Okta account with appropriate permissions to manage applications and settings.
X.509 Certificate: An X.509 certificate from your identity provider (IdP) to configure SSO.
Company Name: The specific company name you are using for your ProcureDesk account to set up the Consumer Service URL.
Required URLs: You should have the Identity Provider Single Sign-On URL and Identity Provider Issuer available from your Okta settings.
Step 1: Enable SSO
Navigate to Admin -> Configurations -> General.
Select "Enable SSO".
Click on the "Save" button to save your changes.
Step 2: Configure IDP Settings
Navigate to Configurations -> IDP Settings under the Master Data section.
Step 3: Populate the IDP Settings
Fill in the following fields as per the notes below:
Consumer Service URL:
Format:
{environment}/sso/{company_name}This is the URL you provided to the customer.
IDP Entity ID:
Enter the "Identity Provider Issuer" from your Okta settings.
SSO Target URL:
Input the "Identity Provider Single Sign-On URL" from Okta settings.
SLO Target URL:
Also use the "Identity Provider Single Sign-On URL" from Okta settings.
Cert Fingerprint:
Convert the "X.509 Certificate" to "Formatted FingerPrint" using the following website:
SAML Tool Fingerprint Generator.Copy the Formatted FingerPrint and paste it into the Cert Fingerprint field in ProcureDesk.
Step 4: Save Changes
After populating all the fields, ensure you click on the Save button to apply the changes.
FAQs
What is SSO?
Single Sign-On (SSO) is an authentication process that allows users to access multiple applications with one set of login credentials.
Why should I enable SSO in ProcureDesk?
Enabling SSO simplifies the login process for users, reduces password fatigue, and enhances security by minimizing the number of credentials that need to be managed.
What do I do if I encounter issues after enabling SSO?
Ensure that all the settings are correctly populated. If issues persist, consult your system administrator or reach out to ProcureDesk support for assistance.
Can I revert back to standard login after enabling SSO?
Yes, you can disable SSO by unchecking the "Enable SSO" option in the General configurations and saving the changes.