Submit a request

Articles in this section

Single Sign On (SSO) Configuration

Avatar
Megan Eckelman
Updated
Follow

Introduction

Lofty provides Single Sign-On (SSO) functionality for users to access the account through a single authentication source. As an administrator, you can enable SSO so that your members can use their company credentials to log in to all applications, including Lofty. This requires you to configure SAML 2.0 between Lofty and the identity provider. We support OneLogin, Okta, and Google.
This feature is only available to Lofty Enterprise and Multi-Team accounts.

Summary

What is SAML SSO?

SSO services allow a user to use one set of credentials (for example, an email address and password) to access multiple applications. The service authenticates the user only once for all the applications to which the user has been given permission when trying to log in to multiple applications.

Pre-requisites for SSO with Lofty

  • Your Identity Provider (IdP) must support the SAML 2.0 standard.
  • Only Lofty users with the permission "Manage User/Entire Company" enabled can configure SAML SSO for Lofty. SSO is only valid for Enterprise and Multi-team packages.

Benefits of SSO

  • Streamlines user management across systems for team owners/admins.
  • Removes the need for end-users to remember and manage multiple passwords. Simplifies end users' experience by allowing them to sign in at one single access point and enjoy a seamless experience across multiple applications.

 

Option to Require Login by SSO

The login method setting provides an option that requires all Lofty users to sign into their Lofty account, both website and mobile app, using Single Sign On (SSO). By default, if you have already set up SSO for your Lofty account, the Login Method will be set to Any Method.
SSO1.jpeg

The permission to enable SSO is called the SSO Setting. You must have this permission enabled to enable or disable the SSO requirement.
SSO2.jpeg


Configuration in Lofty

To configure Single Sign On in your Lofty account, follow these steps:

  • Navigate to the CMS tool. Within the Settings, select SSO Configuration
  • Toggle the setting On to get started

SSO3.jpeg

The SAML SSO Configuration modal is divided into two parts:
  1. Set Application in SSO Third Party: SSO URL and SP Entity ID. Copy and paste it to your Identity Provider (IdP)
  2. SAML identification: An IDP metadata XML needs to be uploaded. For more information on where to obtain this file, please refer to the IDP Setup below.

SSO4.jpeg

After you complete the SAML SSO configuration, the users in your team can log in to Lofty via SAML SSO or through their original Lofty account.

Identity Provider (IdP) Setup

Here, we've included instructions for setting up Lofty  SAML SSO with Google Workspace, Okta, and OneLogin. If you use a different Identity Provider and need assistance with configuration, please contact Lofty support at support@lofty.com.

Google Workspace

Below, please see the reference documents for Google
Step 1: Create a new application integration
  1. Sign in to your Admin counsel at https://admin.google.com/.
  2. From the Admin console Home page, go to Apps > Web and mobile apps.
  3. Click Add App > Add custom SAML app.

SSO6.png

Step 2: Configure SAML Settings in Google Workspace
  1. In Lofty, go to the Settings-->SSO Setting
  2. Copy the SSO URL and SP Entity ID from Set Application in SSO Third Party.
  3. Paste to the corresponding fields.

Single Sign On (SSO) Configuration – Chime Support (Chime Technologies, Inc.. 2023-08-26 at 4.56.28 AM.jpeg

4. Map the primary email to the email in-app attributes

SSO8.png

5. Turn on the service

SAML Admin page.pngSAML admin page service status.png

Step 3: Configure SAML Settings in Lofty

1. Download SAML Metadata

download metadata.png

2. Upload SAML Metadata to Lofty and turn on the switch

3. Turn on the SSO switch

SSO5.jpeg

Okta

Step 1: Add Lofty to Okta's application

1. Log in to Okta. Make sure you are in the administrative instance of your Okta developer account.

2. Go to the Application tab, click Create App Integration

SSO13.png

3. Click "Create New App"

4. Select Web as your platform and SAML 2.0 as your Sign-in method then click "Next".

SSO14.png

Step 2: Configure SAML settings in Okta
1. In Lofty, go to the Settings-->SSO Setting
2. Copy the SSO URL and SP Entity ID from the Set Application in SSO Third Party.
3. Paste to the corresponding fields
okta.jpeg
4. Click "People" and "Create Users"
okta assigned application.png
5. Activate the user and set a password
okta set password and activate.png
Step 3: Configure SAML Settings in Lofty
1. Copy IDP Metadata and format it in https://jsonformatter.org/xml-formatter
SAML Signing Certificates.pngokta optional.png
mceclip1.png
2. Upload SAML Metadata to Lofty and turn on the switch
SSO5.jpeg

 

OneLogin

Step 1: Create a new application integration
1. Log in to OneLogin
2. Go to Applications
SSO21.png
3. Add a new SAML Custom Connector (Advanced) App
SSO22.png
Step 2: Configure SAML Settings in Lofty
1. In Lofty, go to the Settings-->SSO Setting
2. Copy the SSO URL and SP Entity ID from the Set Application in SSO Third Party.
3. Paste to the corresponding fields.
SAML Custom connector.png
4. Click the Users tab in the top left and add yourself and any other users that should have access to private content to the OneLogin application you created.
5. The email must be the same as that used in the Lofty account.
SSO24.png
6. Add the application for these users.
SSO25.png
7. Create a password for the users.
SSO26.png
Step 3: Configure Lofty in OneLogin
1. Download SAML Metadata
SSO27.png
2. Upload SAML Metadata to Lofty and turn on the switch
SSO5.jpeg
3. Complete the configuration and your members can log in to Lofty via SSO
If you encounter errors when setting up SAML SSO, check to make sure your IDP's metadata, SAML requests, and responses are valid XML against the SAML XSD schemas. You can do so using this online tool: https://www.samltool.com/validate_xml.php

Questions?

If you have any questions regarding this topic or any others, please reach out to our Support Team via email at <support@lofty.com>, by phone at 1 (855) 981-7557, or by a chat with us through your Lofty CRM.

Related articles

Comments

0 comments

Please sign in to leave a comment.

All Rights Reserved.

Contact Us: support@lofty.com | 8:00 AM - 8:00 PM EST, Mon - Sun