Single Sign-On (SSO)

Single sign-on (SSO) can be used to pass customer information from your system to the Cleverbridge storefront. This allows you to pre-populate the checkout process and optimize the customer experience.

Cleverbridge offers the following SSO options:

Profile Mapping

The easiest way to implement SSO in the Cleverbridge platform is to use profile mapping. To implement profile mapping, pass your own ID for a customer through the Cleverbridge checkout process using the &internalcustomer parameter. After the customer completes a transaction, Cleverbridge resends this ID to you in a notification, enabling you to align the Cleverbridge profile with your own customer database. After that, you can refer back to this profile ID for possible follow-up transactions.

To implement this type of SSO, complete the following:

1. Create a URL that opens a checkout page for your product.

   https://www.cleverbridge.com/864/?scope=checkout&cart=97771

2. Add the internalcustomer parameter to the link and add your unique profile ID as its value to enable SSO. The profile ID should come from the Auth0 provider or your internal customer database. If the internalcustomer ID is not known in the Cleverbridge system, we will create a customer profile with the associated customer ID. If the internalcustomer ID is already known in our system (e.g. returning customers), then the entire cart will be prefilled with all the customer's contact & payment data we have in our system.

   https://www.cleverbridge.com/864/?scope=checkout&cart=97771&internalcustomer=UUID-YOUR-UNIQUE-ID-1234-5678

   If you would like to update and overwrite portions of the customer's existing profile in the Cleverbridge platform, you can also add parameters to the URL that contain personal information the customer has recently provided. For a full list of available customer parameters, see Customer Data.

   https://www.cleverbridge.com/864/?scope=checkout&cart=97771&internalcustomer=UUID-YOUR-UNIQUE-ID-1234-5678
   &billingFirstname=Han&billingLastname=Solo&billingEMail=han.solo%40cleverbridge.com
   &billingStreet1=Gereonstr.%2043&billingPostalCode=50670&billingCity=Cologne&billingCountryId=FR
   &language=en

3. Protect the parameters in the TargetUrl against manipulation by creating a session URL (SURL) or dynamic protected URL (Dynamic UURL). This can be done either via the Generate User Session URL API endpoint or the Generate Protected URL API endpoint. If you do not protect the link, the internalcustomer parameter will be ignored. To learn more about the limitations of these link types, see Quick Facts about URLs.

   curl --request POST \
     --url 'https://rest.cleverbridge.com/urlgenerator/generateusersessionurl' \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --header 'authorization: Basic xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' \
     --data '{
       "TargetUrl": "https%3A%2F%2Fwww.cleverbridge.com%2F864%2F%3Fscope%3Dcheckout%26amp%3Bcart%3D97771%26amp%3BbillingFirstname%3DHan%26amp%3BbillingLastname%3DSolo%0A%26amp%3BbillingEMail%3Dhan.solo%2540cleverbridge.com%26amp%3BbillingStreet1%3DGereonstr.%252043%26amp%3BbillingPostalCode%3D50670%0A%26amp%3BbillingCity%3DCologne%26amp%3BbillingCountryId%3DFR%26amp%3Blanguage%3Den%26amp%3Binternalcustomer%3DUUID-YOUR-UNIQUE-ID-1234-5678"
     }'

4. Provide the generated Url to the customer within an email or website redirect.

   {
     "Url":"https://www.cleverbridge.com/864/surl-w05ssUKXUq",
     "ResultMessage":"OK"
   }

5. After the customer completes the purchase, you can retrieve data from the Cleverbridge system using notifications (webhooks). These notifications contain your unique profile ID in the internalCustomer field. For more information, see Notification Guide.

   {
     "meta": {
       "type": "PaidOrderNotification",
       "date": "2019-03-19T14:47:34.857671",
       "schemaUrl": "https://www.cleverbridge.com/JsonNotificationSchemas/PaidOrderNotification"
     },
     "purchaseId": 123456789,
     ...
     "internalCustomer": "UUID-YOUR-UNIQUE-ID-1234-5678",
     ...
     "items": [{
       ...
       "recurringBilling": {
         "subscriptionId": "S12345678",
         ...
         "intervalNumber": 0,
         ...
         "nextBillingDate": "2020-03-19T14:47:34.857671",
         ...
         "renewalType": "Automatic"
         ...
       }],
     ...
     }
   }

SAML

To activate SAML SSO for the checkout experience, contact our Client Experience team and provide them with your identity provider (IDP) settings.