Skip to main content

Reply to "SSO login"

Hi @Harvey Mercado,

You won't be able to do an IdP-initiated login request, which is what you're asking for. I wouldn't worry about this auto-sign in scenario just yet. I'd focus first on the basics of getting the SAML IdP AuthnRequest processing and Assertion response working. Get that set up and working. Then, you can start looking at how to handle automatic logins. When you get there, you'll have a couple of options:

  1. Probably the best option is to enable "Auto Sign-In Mode" in Crowdstack. What this will do is cause Crowdstack to automatically send users through your IdP any time they establish a new session on Crowdstack. This way, you don't have to do anything special on your end when the user signs in.
  2. An alternative, if you really want to establish a session in Crowdstack immediately when a user signs in to your system, is to redirect to Crowdstack's /login URL, which will trigger the SAML AuthnRequest implicitly. That URL also supports a redirect query parameter which you can use to define where the user should go on completion of the login (e.g. if you want them to return back to your site).

Again, though, I wouldn't worry about auto-login until you have the basic SSO integration hooked up and working. If you take this kind of incremental approach to developing the integration, I think it'll go smoother for you.

Hope this helps!

Brian

Brian Lenz
×
×
×