Umbraco SSO Integration
When Umbraco is integrated with your company's SAML Single Sign On infrastructure your site visitors benefit by having one less password to remember, meaning that your site becomes more secure and easier to manage. IT staff can quickly and easily add, remove, and manage users and their online activity.
Benefits of SAML Single Sign On
SAML Single Sign On makes Umbraco sites safer because:
- Users have fewer passwords to remember, so they're less likely to write them down;
- Identity Providers can use strong authentication, such as Two-Factor Authentication (2FA), which isn't supported in Umbraco;
- Access to Umbraco can be revoked easily when an employee leaves an organisation, reducing the likelihood of misuse or data breaches.
While, natively, Umbraco doesn't support SAML, Carbon Six Digital has developed SAML-based integrations with systems including Ping Identity, Okta and Last Pass. We're able to develop bespoke packages for clients that take into account their particular SAML requirements including:
- Identity Provider Initiated (IdP Initiated) or Service Provider Initiated (SP Initiated) Single Sign On;
- Support for Single Sign Out;
- Support for SAML SSO Umbraco Members and Users;
- Support for multiple Identity Providers, so called Multi-tenanted SAML environments;
- Automated provisioning of new users; and
- Mapping user assertions to Umbraco security group permissions.
FAQs
SAML and Single Sign On can be confusing, read our FAQs to find out more on how SAML makes Umbraco sites safer.
- What is Single Sign On and Why is it important?
- Single Sign On is a loose term applied to systems that enable users to login (authenticate in the technical terms) using a single username and password across a number of systems.
- What is SAML and what can it do?
- The Security Assertion Markup Language is an XML based protocol that enables systems such as Umbraco, Office 365 or other web based systems to delegate User Authentication and Authorisation to a 3rd Party System known as an Identity Provider.
- Does Umbraco support SAML Single Sign On?
- Natively Umbraco doesn't support SAML Single Sign-on. However, we have developed bespoke integrations for clients which support SAML Single Sign-on using identity providers such as Ping Federate, Okta and Lastpass.
- Does Umbraco support Multi-tenanted Single Sign On?
- We have developed both single-tenanted SAML environments, where all Umbraco Members authenticate against a single SAML Identity Provider, as well as multi-tenanted SAML environments, where different Umbraco Members authenticate against different SAML Identity Providers.
Case Study
Harwood's boost employee productivity with SSO
When Carbon Six Digital developed a new Umbraco Intranet for Harwood's Group, a privately owned premium automotive retail brand in the South of England, they chose to implement SAML Single Sign On using Okta to reduce complexity and boost productivity.
In this video, listen to Paul Marden, CEO of Carbon Six Digital, talk about the project at the Umbraco Poland Festival.