If your organization is already using a Single Sign-On (SSO) service in order to control access to different areas of your business online, you can integrate your SSO solution with iPaper.
✅ Single Sign-On integration is available on all Enterprise+ accounts.
Integrating your SSO solution gives you a greater degree of control over who has access to your iPaper account, and greater ease of usability for your organization’s members. Best of all, setting up SSO with iPaper is easy – let’s get started!
📖 This article explains:
How does SSO work?
SSO, is a convenient and user-friendly way of accessing multiple online services, websites, or applications with just one set of login credentials. SSO works by using a central authentication system, which verifies your identity when you log in.
Once you're authenticated, the system grants you access to all connected platforms without asking for your credentials again. This makes it simpler and more efficient to use multiple online services, improving your overall online experience.
How to set up your SSO solution with iPaper
In this guide, we assume that you have already set up an SSO solution for your organization, and are familiar with the requirements for implementing it on a new service.
⚠️ Please note that SSO settings are only available to Account Administrators. If you do not have Administrator access, please contact your Account Administrator.
💡 You'll need to provide the following IdP Entity ID and a Reply URL to your SSO provider during the setup process:
IdP Entity ID: iPaperSSO
Reply URL (ACS URL): https://admin.ipaper.io/sso/SamlConsume
Sign on URL: https://admin.ipaper.io/
If your iPaper account resides on a Partner area, you'll need to provide the following URL as your Reply URL, using this address structure:
https://PartnerAdmin/sso/SamlConsume
⚠️ Remember to change 'PARTNERADMIN' with the full domain of your partner.
In iPaper admin, open the Account details menu by clicking your account name in the uppermost, right-hand corner.
Select Account settings from the drop-down menu.
From the Account settings page, select Single Sign-On settings from the vertical menu on the left. Here, you will see a number of fields that require an input in order to set up your SSO with iPaper.
First, toggle on Single Sign-On using the toggle button.
Next, you’ll need to enter your Identity Provider URL in the appropriate field. You can retrieve this from your SSO provider.
You’ll also need to paste in your Base64 Public Certificate in the next field. This looks like a long string of letters and numbers. This is generated by your SSO provider.
Here’s an example of how a Public Certificate can look:
Don't forget to save your changes!
Terminology used by different cloud platform services
Different cloud platform service (CPS) use terminology might not match that in iPaper:
Microsoft Azure
The Identity Provider URL in iPaper is known as the Login URL in Azure.
Okta
The Identity Provider URL in iPaper can be found under IDP Metadata in Okta. You can find it in the Okta Admin Dashboard, → SAML Signing Certificates → Actions → View IDP Metadata.
Things to consider when setting up SSO with iPaper
When you’ve set SSO up on your iPaper account, users logging in to your organization will automatically be redirected to your SSO service’s login page, when they enter their email address into iPaper admin. Via your SSO service, you’ll be able to control which users have access to your iPaper account.
However, please note that our SSO integration does not support Cross-domain Identity Management (SCIM). This means that, in addition to creating a user within your SSO service, you will still need to create a new user with the matching login credentials (email address) separately, in iPaper.
Should you have any questions about how to implement an SSO service for your iPaper account, or anything else, our Customer Care team is here to help: simply send us a message using the messenger bubble in the corner. ✌️