SSO Configuration

Connect SyncSage to your organization's identity provider

Enable SSO to let users access SyncSage with your organization's existing credentials (e.g., Azure AD, Google Workspace).

Steps to Enable SSO:

Go to Settings > Security > SSO
Choose your identity provider (SAML/OAuth)
Upload metadata or enter SSO credentials (e.g., Entity ID, Redirect URL)
Click Enable SSO

Role Mapping

Map your identity provider's groups or roles to SyncSage roles for automatic permission assignment.

Example SAML Attribute Mapping:

<saml:AttributeStatement>
  <saml:Attribute Name="http://schemas.syncsage.io/roles">
    <saml:AttributeValue>admin</saml:AttributeValue>
  </saml:Attribute>
</saml:AttributeStatement>

Just-in-Time Provisioning

Enable automatic user creation when a new user authenticates via SSO.

Configuration:

Go to Settings > Security > SSO
Enable "Just-in-Time Provisioning"
Configure default role for new users

Common Issues

Issue	Solution
SAML Response Validation Failed	Verify the certificate in your IdP configuration is valid and not expired
User Not Authorized	Check role mappings and ensure the user has the correct group membership in your IdP
Redirect Loop	Verify the ACS URL is correctly configured in your IdP

Need Help?

For assistance with SSO configuration, contact [email protected]

SSO Configuration

Steps to Enable SSO:

Azure Active Directory

Configuration Steps:

Google Workspace

Configuration Steps:

Okta

Configuration Steps:

Role Mapping

Example SAML Attribute Mapping:

Just-in-Time Provisioning

Configuration:

Common Issues

Need Help?