Enabling Single Sign-On (SSO) in Cloudcraft allows you to simplify authentication and login access to Cloudcraft.

This article helps you set up SSO if you do not have a specific guide for your identity provider. If your identity provider is Azure AD or Okta, see the following articles:

• Enable SSO With Azure AD
• Enable SSO With Okta

For more general information on using SSO with Cloudcraft, check out Enable SSO in Your Account.

Setting up SAML/SSO

1. In Cloudcraft, navigate to User > Security & SSO.
2. The details you need to create a new application with Azure can be found in the Cloudcraft service provider details section.

3. Log in to your identity provider as an administrator.

4. Follow their documentation to create a new application for SAML integration.

5. Map their fields with Cloudcraft’s fields. For reference, the fields are usually mapped as follows, with the first one being the label used by your identity provider and the second one being the label at Cloudcraft.

   • Single sign on URL: Assertion Consumer Service URL
   • Audience URI: Service Provider Entity ID
   • Name ID: NameId Format

6. If the Name ID field is a dropdown, select emailAddress or similar.

7. Configure the application to allow access to all the relevant users within your organization.
8. Download the metadata file generated by your provider — sometimes called federation XML.
9. Navigate back to Cloudcraft and upload your metadata XML file.

10. Toggle the SAML Single Sign-On is enabled option.
11. If you prefer to have your users access Cloudcraft only via your identity provider, enable the Strict mode option.