Setup a SAML SSO provider

This guide will show you how to setup a SAML SSO provider so that your team can login with your company's Identity Provider (Okta, OneLogin, Ping Identity, ...) using the SAML protocol.

This requires some setup on your Identity Provider itself, so you might need help from an IT admin.

1. Go to your Identity Provider and start adding a new SAML 2.0 application integration. This might vary from IdP to another, so please refer to your IdP documentation for more details

2. You will need the following information:

• SAML Assertion Consumer Service (ACS) URL: https://app-auth.getcohort.com/__/auth/handler

  • Use the same URL for the Logout Post and Redirection URL

• Audience URI (SP Entity ID): admin.getcohort.com

• Leave Default Relay State blank

• Name ID Format: EmailAddress

1. Save your application and provide the following information to the Cohort support team:

• The SAML Metadata of your application (in XML format)

• Whether or not you want to enable JIT provisioning

• Whether or not you want to allow signing in with email

The Cohort support team will get back to you once your SSO is configured.