<aside> 📝

ModernLoop supports Single Sign-On (SSO) authentication via SAML 2.0, allowing users to access ModernLoop securely and conveniently using their existing domain credentials. This means users can log in with the same username and password they use across your organization's tools, eliminating the need for additional login credentials and streamlining the authentication process.

<aside> 📢

ModernLoop does not support earlier versions of SAML. If your organization uses Okta, please refer to our Okta Setup Documentation.

</aside>

ModernLoop's SSO setup provides a secure and seamless login experience while supporting advanced provisioning options via SCIM. Whether you choose SAML with JIT/manual provisioning or full SCIM integration, ModernLoop ensures flexibility to match your organization’s needs.

ModernLoop works with your IT team to build a custom connection in your preferred SSO provider.

For further assistance or to start the integration process, please contact your Customer Success Manager.

</aside>

In This Article

Pricing

SSO is an optional, paid add-on service.

If you’re not currently utilizing SSO with ModernLoop but are interested in exploring this feature, please contact your Account Executive or Customer Success Manager for more information.

Creating a Custom SAML Configuration

If you are interested in setting up a custom SAML/SCIM Protocol, please reach out to your CSM. They will collaborate with your IT team to build a custom connection.

Steps to Set Up a Custom SAML Configuration:

1. Create a Custom App in Your Identity Provider:

   • Generate a Metadata URL or Metadata XML in your Identity Provider.
   • Share the Metadata with your CSM.

2. ModernLoop Configuration:

   • Using the Metadata provided, ModernLoop will configure the necessary settings, including SSO URLs and signing certificates.
   • ModernLoop will then provide you with the following information to complete the connection:
     • Entity ID:
       • Example: urn:auth0:modernloop:{{CONNECTION_NAME}}
       • Sample: urn:auth0:modernloop:acme-company
     • Reply/ACS URL:
       • Example: https://auth.modernloop.io/login/callback?connection={{CONNECTION_NAME}}
       • Sample: https://auth.modernloop.io/login/callback?connection=acme-company

3. Set Up Required Attributes in Your Identity Provider:

   Ensure the following attributes are configured to pass to ModernLoop:

   • email: The user’s primary email address.
   • given_name: The user’s first or given name.
   • family_name: The user’s last or family name.

Setting Up SCIM Provisioning (Optional)

ModernLoop supports both Just In Time (JIT) provisioning and manual provisioning for all SAML SSO configurations. Additionally, you can enable automatic provisioning via SCIM for enhanced functionality.

Key Features of SCIM Provisioning:

• User Creation: ModernLoop creates users using the information provided in the SAML response.