SAML

Owned by Himanshu Dwivedi
Aug 28, 2018
1 min read

Data Theorem supports SAML 2.0 to provide Single Sign On authentication for your organization. If you would like to use SAML to authenticate users to Data Theorem, please complete the steps below.

Step-by-step guide

  1. Download the SAML metadata file from the portal (Login → Gears → DevSecOps → SAML Setup), and provide it to your SSO administrator to configure your SAML Identity Provider
  2. If your SAML Identity Provider does not support uploading SAML metadata files, then you can use the configuration values provide in the portal:
    1. EntityID: <Data Available in the Data Theorem Portal>
    2. Assertion Consumer Service URL: <Data Available in the Data Theorem Portal>
    3. We require the use of RSA-SHA256 for signing SAML message
    4. We require users' subject/nameID format to be their email address
    5. We do not currently require any other attributes to be included the response (eg, the user's name)
    6. We support the Web Browser SSO Profile.
    7. We support the HTTP POST Binding for incoming authentication assertions.
  3. After you have configured your SAML Identity Provider, please email support@datatheorem.com with the following information:
    1. The SAML metadata file for Data Theorem within your SSO provider. This file should describe how Data Theorem can redirect your users to to your SSO provider, as well as the signing certificate for your SAML Identity Provider.
    2. The name of the SSO product that you use (eg, Okta, Ping, Azure Active Directory, etc.)
    3. Contact information for a support contact within your organization for SAML/SSO deployment
  4. We will then work with you to ensure that SAML is working for a subset of your users before it becomes required for all of your users.