SSO is a paid feature, please make sure that you've discussed it beforehand with your Customer Success Manager to check if it's part of your license. Don't hesitate to contact your Customer Success Manager for further information.
If you'd like to have more information on what SSO is and how it works with Frontify, you can check our introduction or have a look at our FAQs.
Getting started
To enable SSO for your brand portal, go to the Customer Hub and look for the option to submit an SSO setup request (under the Ecosystem section). You will receive specific instructions on how to begin the configuration for SSO using SAML.
Once your request is submitted, our Support team will contact you by email to complete the setup.
If you need help with your SSO configuration at any point, feel free to reach out to support@frontify.com.
Configuring your IdP for Frontify
Once you begin submitting your SSO setup request in the Customer Hub, we will ask you to configure your IdP for Frontify as first step. Here's an overview of the metadata needed for the service provider configuration on your side:
Identifier (SP Entity ID): https://DOMAIN/api/auth/saml/metadata/
Reply URL (ACS URL): https://DOMAIN/api/auth/saml/acs/
Sign on URL: https://DOMAIN/api/auth/saml/
Relay State: https://DOMAIN/
Logout URL: https://DOMAIN/api/auth/saml/sls/
Name ID Format: EmailAddress
Note that you need to exchange the "DOMAIN" part with your actual domain where you want to set up SSO.
Below you can find an example if you would set it up for the domain brandhub.frontify.com:
Identifier (SP Entity ID): https://brandhub.frontify.com/api/auth/saml/metadata/
Reply URL (ACS URL): https://brandhub.frontify.com/api/auth/saml/acs/
Sign on URL: https://brandhub.frontify.com/api/auth/saml/
Relay State: https://brandhub.frontify.com/
Logout URL: https://brandhub.frontify.com/api/auth/saml/sls/
The correct domain which you've entered will automatically be filled in your customer hub.
Attributes
The attributes needed by Frontify are (please note lower/uppercase):
User.email
User.FirstName
User.LastName
User.Groups (if needed)
SSO Configuration Examples
Below you can find configuration examples that can help you while setting up SSO:
Send us your metadata over the form
Once SSO has been configured on your side, we require either the metadata.xml file or the metadata URL. This metadata must include the following details:
Entity ID
Single Sign-On (SSO) Service URL
X.509 Certificate
You can upload or enter this information in your Customer Hub by completing the form and submitting the metadata.xml file or metadata URL at the final step.
After submitting the form, our support team will contact you via email from support@frontify.com