Here are the instructions on how to set up your company with SSO on Knak using SAML 2.0 for your account:
Go to the Admin panel and go to settings. Find the SSO section and click on the configure button in the "Enable SSO" section:
Don’t see this section? Contact your Customer Success Manager to enable it for you!
Copy the information provided on the setup page and use it to create a new app/connection on your SSO provider
Make sure to set the Application Username Format to Email
After the app is created, retrieve the Identity Provider Single Sign-On URL and X.509 Certificate from the app and enter it into the corresponding fields on the “Set Up SSO” page
Not sure what these fields mean and where to find them? Check out our help doc https://help.knak.io/en/articles/6288285-self-serve-sso
Press save
A notification should pop up saying the connection was successfully created and a toggle button should now appear on the page
This toggle button allows you to enable and disable SSO for your organization
Some additional information
Users must be added within Knak to use the platform. IdP-initiated user provisioning is not currently supported.
When you successfully have SSO working, we will enable user creation without sending invites. If you need to add users in bulk please contact us and we will happily assist you.
Both IdP and SP initiated authentication are supported for SSO users. Either sign in using the Knak tile on your Identity Provider or use the SSO button on the login page and provide your email address to sign in
If you enable the option to "Force SSO" users from your company will have to use the SSO and will not have the option to use a password to log in. If you would like to have this feature enabled, please contact the Knak support team and we can enable "Force SSO" for your instance.
Troubleshooting
If an invite was sent to a user and they have not accepted the invite, they will not be able to log in until they have accepted the invite (screenshot shows a pending invite icon).
The admin can delete the user and add them via SSO or the user can just accept the invite and log in using the SSO URL.
Need more help? Contact support via live chat within Knak using the chat bubble in the bottom right corner or email support@knak.com