Set up Single Sign-On
Cleverbridge supports SAML-based Single Sign-On (SSO) for SCM and Cleverbridge Documentation.
The setup requires coordination between your identity provider administrator and Cleverbridge Client Experience.
Cleverbridge uses service-provider-initiated SSO.
1. Contact Client Experience
Contact Cleverbridge Client Experience and provide:
- The name of your identity provider, such as Microsoft Entra ID or Okta.
- An email address for a test user.
Client Experience provides the service-provider details required for your configuration, including:
- Entity ID: The unique identifier for Cleverbridge as the service provider.
- Assertion Consumer Service (ACS) URL: The endpoint where your identity provider sends the SAML response.
2. Configure Cleverbridge in your identity provider
Use your identity provider's SAML application workflow to configure Cleverbridge as a service provider. Enter the Entity ID and ACS URL provided by Cleverbridge.
For provider-specific guidance, see:
Configure signing and encryption according to the details provided by Cleverbridge.
3. Send your identity provider metadata to Cleverbridge
After configuring the application, send the identity provider metadata URL or metadata file to Client Experience. The metadata typically includes the identity provider entity ID, sign-in endpoint, and signing certificate.
Cleverbridge then completes the internal configuration and enables SSO for the designated test user.
4. Test SSO
Sign in with the designated test user and confirm that the user can access SCM and Cleverbridge Documentation through your identity provider.
Resolve any authentication or user-mapping issues before enabling SSO for additional users.
5. Add users to SSO
In SCM, go to Settings > Users and enter the user's identity provider email address in the SSO Email Address field.
The value must match the email address used to identify the user in your identity provider.
For large teams, Cleverbridge may support batch user provisioning. Contact Client Experience or your Technical Account Manager for available options.