SSO
Overview
Conduit offers flexible Single Sign-On (SSO) implementation options, allowing you to require SSO authentication for either your entire organization or specific users based on your security requirements. Currently, SAML protocol is fully supported, with OpenID Connect (OIDC) integration scheduled for deployment in the near future. For SAML integration instructions, please reference the guide below.
Upon SSO activation for your organization, users will automatically be directed to the dedicated SSO authentication portal: https://getconduit.ai/sso/login/
SAML
Please contact Conduit's engineering team at [email protected] to initiate SSO implementation via SAML for your organization.
You can provide your Identity Provider (IdP) federation metadata document (XML file or URL), which contains all of the fields below, or provide the individual fields directly:
| Parameter | Description | Required |
|---|---|---|
| SAML signing certificate (X.509) | Public certificate used to verify the signature on SAML assertions. | Required |
| IdP Entity ID / Issuer | Unique identifier of your Identity Provider. | Required |
| Sign-In URL | IdP Single Sign-On (SSO) endpoint where authentication requests are sent. | Required |
| Sign-Out URL | IdP Single Logout (SLO) endpoint used to terminate the session. | Optional |
Conduit's complete SAML configuration parameters can be found in the sections below.
SAML Configuration Parameters
Please configure your Identity Provider (IdP) with the following parameters for the environment you are configuring.
Production
| Parameter | Value |
|---|---|
| Entity ID / Issuer | getconduit.ai |
| Sign-In URL | https://getconduit.ai/sso/login/ |
| Assertion Consumer Service (ACS) URL | https://getconduit.ai/sso/acs/ |
| Binding Method | HTTP-POST |
| NameID Format | Email Address (do not include name format) |
UAT (optional)
| Parameter | Value |
|---|---|
| Entity ID / Issuer | uat.getconduit.ai |
| Sign-In URL | https://uat.getconduit.ai/sso/login/ |
| Assertion Consumer Service (ACS) URL | https://uat.getconduit.ai/sso/acs/ |
| Binding Method | HTTP-POST |
| NameID Format | Email Address (do not include name format) |
Required Attributes
Conduit requires the following user attributes to be included in the SAML assertion:
| Conduit Attribute | IdP Attribute |
|---|---|
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress |
Okta
| Name | Name format | Value |
|---|---|---|
| emailAddress | Unspecified | user.email |
