How does SAML SSO Work in Hushly

SAML SSO works by transferring the user’s identity from one place, that is the identity provider, to another, that is the service provider.

1. A user authenticates by attempting to log into Hushly using SAML SSO.
2. Hushly redirects the user to the Single Sign-On page.
3. The user enters his Organization Name/Domain.
4. He is then redirected to the login page of the identity provider, such as Okta.
5. The user enters the credentials.
6. The identity provider validates the user.
7. The identity provider redirects the user to Hushly’s consumer assertion URL and passes a SAML assertion authorizing the user.
8. The identity provider sends user attributes like email address, first name, and last name are sent along with the assertion to Hushly.
9. Hushly verifies the identity provider’s certificate and grants access to the user.
   
   

SAML usually includes three entities:

You can configure Hushly to act as a service provider in this mechanism. You can use your own SAML server to act as an identity provider or a third-party application such as OneLogin or Okta.

A quick guide to configuring SAML 2.0 SSO on Hushly:

1. From the Left Nav Menu, click Setup > Security.
   
   The Security Configuration page launches with the single-sign-on option. By default, the option is disabled
    
2. From the Security Configuration page, toggle the single sign-on switch to Yes.
    
3. The Security Configuration page shows the following details.
    
4. Click the Login Link. The Single-Sign-On dialog box opens with the domain details prepopulated from your Hushly account. You may want to verify whether the single-sign-on is launching your company’s SSO page.
   Note: You can optionally bookmark this page to log into your firm’s network and Hushly. 
5. Enter the SAML entity ID. 
6. Enter the SAML SSO URL. 
7. Enter the logout URL. 
8. Copy and paste the security certificate. The certificate is used for encryption and validation of assertion between your identity provider and Hushly.
   Alternatively, you can upload a self-signed certificate with .cer or .crt file extensions by clicking Upload Certificate. 
9. Click Save.