Single Sign-On

The Single Sign-On feature is an authentication service that uses the SAML 2.0 protocol to permit a user to use one set of login credentials (EX: email and password) to access multiple applications. 

Enplug SAML metadata

Use these values to set up the Enplug app on the Identity Provider's side:

• Single Sign-On URL (Assertion Consumer Service): https://saml.enplug.com/saml/assertioncontrolservice/ 
• Audience URL (Entity ID): https://saml.enplug.com 
• NameID Format: Email

Enable Single Sign-On from Dashboard

1. Log into Enplug.

2. Click on the gear icon in the bottom left to access Settings.

3. Click General.

4. Navigate to the Single Sign-On tab.

5. Click Enable Single Sign-On.
   • You'll need the Single Sign-On information from your identity provider to complete this section. 
   • The URL provided must be unique when setting up this feature. 
   • You can't have the same URL for multiple accounts.
6.  Click Enable once settings are complete.

Note: Once enabled, the Admin has the option to Disable Single Sign-On or Edit the information from the Single Sign-On tab. 

Administrator Dashboard Login

Once SSO is enabled, by default, all users besides Administrators with the Security user permission must use their SSO provider to log in. The Security Administrators can enable password sign-in for another user by selecting Password Sign In in the User Settings. 

When logging into the dashboard, the Admin can click on Admin Sign-In which will allow them to bypass the SSO provider.

Note: If you create a user when SSO is enabled, they won't receive an email to create a password as they'll be required to use their SSO provider to sign in. If SSO is disabled at a later time, they'll automatically receive the email to set up their password.

SSO Enforcement

Admins can require users to sign in with Single Sign-On. This will keep authentication managed centrally, while still allowing admins to maintain manual login options for emergency access/troubleshooting.

To do so:

1. Log into Enplug.

2. Click on the gear icon in the bottom left to access Settings.

3. Click General.

4. Navigate to the Single Sign-On tab.

5. Click Enable/Disable Password Sign On For Non-Admin Users to set as desired.

Notes:

• You must be a Network Admin or Account Admin to enable SSO enforcement.

• Single Sign-On must already be applied to the account or network.

• Enforcement can be applied at the account level or be inherited from the network level.