Here are the instructions on how to set up your company with SSO on Knak using SAML 2.0 for your account:
Go to the Admin panel and go to settings. Find the SSO section and click on the configure button in the "Enable SSO" section:
Don’t see this section? Contact your Customer Success Manager to enable it for you!
Copy the information provided on the setup page and use it to create a new app/connection on your SSO provider
Make sure to set the Application Username Format to Email
After the app is created, retrieve the Identity Provider Single Sign-On URL and X.509 Certificate from the app and enter it into the corresponding fields on the “Set Up SSO” page
Not sure what these fields mean and where to find them? Check out our help doc https://help.knak.io/en/articles/6288285-self-serve-sso
Press save
A notification should pop up saying the connection was successfully created and a toggle button should now appear on the page
This toggle button allows you to enable and disable SSO for your organization
Some additional information
Users must be added within Knak to use the platform. IdP-initiated user provisioning is not currently supported.
When you successfully have SSO working, we will enable user creation without sending invites. If you need to add users in bulk please contact us and we will happily assist you.
Both IdP and SP initiated authentication are supported for SSO users. Either sign in using the Knak tile on your Identity Provider or use the SSO button on the login page and provide your email address to sign in
If you enable the option to "Force SSO" users from your company will have to use the SSO and will not have the option to use a password to log in. If you would like to have this feature enabled, please contact the Knak support team and we can enable "Force SSO" for your instance.
Troubleshooting Login Issues with SSO
If you are unable to log in to your Knak account and suspect it is related to Single Sign-On (SSO), this guide provides steps to troubleshoot the problem. Follow the instructions below to resolve common login issues effectively.
Common Reasons for SSO Login Issues
Pending User Invite: If an invite was sent to a user and they have not accepted the invite, they will not be able to log in until they have accepted the invite (screenshot shows a pending invite icon). The admin can delete the user and add them via SSO or the user can just accept the invite and log in using the SSO URL.
Incorrect SSO Link Usage: Many organizations enforce the use of a specific SSO login link for accessing Knak. Attempting to log in through a different link may result in errors.
Blocked Account Status: Your account could appear blocked due to misconfigurations or conditions set by your organization’s SSO provider.
Steps to Resolve SSO Login Problems
Verify the Correct SSO Link:
Ensure you are using the organization-specific SSO link provided.
If you are unsure of the link, contact your IT administrator or refer to the resources your organization has provided.
Review Login Credentials:
Double-check your login credentials for accuracy (e.g., username and password).
Ensure your SSO account is active within your organization's systems.
Note Error Messages:
If an error message appears, note the text or take a screenshot. This information can help administrators or support teams diagnose the issue.
Contact Support if Necessary:
If the above steps do not resolve your issue, consult your IT administrator or Knak support for further assistance.
Provide any error messages or login details (excluding sensitive or private information).
Need more help? Contact support via live chat within Knak using the chat bubble in the bottom right corner or email support@knak.com