How To Configure Single-Sign-On (SSO) in License Information

Single Sign-On (SSO) lets users sign in to Euna Grants with your organization’s identity provider instead of a separate Euna username and password. You can set it up on the License Information page.

Prerequisites: Before you set up SSO, confirm that your Euna Grants subscription includes it, that you have your identity provider’s sign-in URL and certificate or metadata, and that you have administrator access to your account.

1. Sign in to Euna Grants with an administrator account.
2. Click Administration > License Information in the side navigation.
3. Open the SSO Configuration and click Identity Provider from the dropdown menu.
4. Click the (Edit icon) in the icon bar.
5. Enter the following information:
   1. Is Active: Check this box to turn SSO on. If you leave this box unchecked, the SSO will be inactive.
   2. Partner Name: Label for the identity provider, such as Okta or Microsoft Entra ID.
   3. Description: An optional note about the configuration.
   4. Single Sign-On Service URL: Where sign-in requests go. The identity provider supplies this URL.
   5. Single Logout Service URL: Where sign-out requests go. 
   6. Certificate Thumbprint: A short fingerprint, usually a SHA-1 or SHA-256 hash, that uniquely identifies the signing certificate. It’s used to confirm you have the right certificate.
   7. Certificate Expiration Date: The date the signing certificate stops being valid. After it expires, sign-ins will fail until you upload a new certificate.
   8. Public Key: The identity provider’s public signing certificate, used to verify sign-in responses. Copy it from the provider’s metadata.
   9. Bypass SSO: Users who can sign in with a password instead of SSO. See How To Add and Manage the Bypass SSO field on the Identity Provider page.
6. Click Save.

  Note: If the SSO Configuration section does not appear, your subscription may not include SSO. SSO must be available in your Euna Grants subscription before you can configure it. Contact your Euna account representative.