Setting up Single Sign-on for your TrustCloud

Single Sign-on (SSO) allows users in an organization to securely access multiple applications and websites using a single set of credentials. This approach minimizes the need for users to remember multiple usernames and passwords, thereby reducing the risk of password fatigue and improving overall security. Additionally, SSO systems support compliance with regulatory requirements by ensuring that authentication processes are standardized and consistently applied across all connected applications. Implementing this satisfies control AUTH-1 Single Sign On (SSO).

You can set up SSO for your TrustCloud using any provider that supports either SAML or OIDC. The section below describes the setup process.

SSO setup using SAML

You can edit your SSO settings, choose to connect with your identity provider using either SAML or OpenID Connect (OIDC) and login using SSO credentials from the TrustCloud program.

To use SAML as your Identity Provider service,

1. Go to your TrustCloud program.
2. Navigate to “Platform Administration -> Authentication” (https://app.trustcloud.ai/trustcloud/settings/authentication)
3. On the “Authentication” page, click on the “Edit SSO Settings” button.
4. By default, your identity provider is “SAML”.
   The following screenshot shows the SSO Settings page for SAML.
   
   
5. Follow the instructions to set up
   1. Go to your Identity Provider service and create a new SAML connection. Name it as “TrustCloud”.
   2. The “Single Sign-On URL” is auto-generated and you can copy this URL.
   3. The “SP Entity ID or Audience URI” is also auto-generated and you can copy this URL.
   4. Select the protocol binding to either “HTTP-Redirect” or “HTTP-Post”
      Note: HTTP-Redirect is recommended here.
   5. Set the NameID format to EmailAddress
   6. Set the application username to Email
   7. Set the following additional attributes to send in the SAML assertion:
      1. displayName should be set to the user’s full name (e.g. firstName + “ “ + lastName or a full name field from your IdP)
      2. company should be set to the name of your company
   8. Save your connection
   9. Input the following information from your IdP on the TrustCloud configuration page:
      1. Enter your Single Sign-On URL.
      2. Select Protocol Binding from the drop-down menu.
6. Click on the “Save SSO Settings” button.

Once your setup is complete, you can confirm it by logging in with your SSO provider.