Overview
Single Sign On (SSO) is available for the Mobile Forms Portal and for the iOS and Android Mobile Forms app versions 7.4 and higher. If you are interested in enabling Single Sign On for your company, please contact the Field2Base Professional Services team (f2bps@field2base.com) for assistance.
You can access the Single Sign On (SSO) Settings by navigating to Admin > Company Profile > System Settings.
Note: Single Sign On (SSO) is available for Enterprise
Tier customers. Please contact your Account Manager if you have any questions about adding SSO for your company.
Configuring Single Sign On
Prerequisites
You will need to set up Field2Base with your Identity Provider to get the metadata needed in step 3.
- Our Service Provided Entity ID is: https://admin.field2base.com/
- Our Service Provided Metadata is: https://admin.field2base.com/Portal/Saml2/
- Here are the attributes we are expecting to receive in responses:
- http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name - Should contain the User’s E-Mail Address
- givenname - Should contain the User’s First Name
- surname - Should contain the User’s Last Name
Required Steps
1. Select “Single Sign-On (SSO)” as the Authentication Type.
2. Enter the Company Identifier that you wish to use. This is a unique alphanumeric string that identifies each company in our system for SSO. The Portal Login URL and Portal Home Page URL links will point to your SSO Login and Home pages using your Company Identifier.
Note: You will need to contact the Professional Services team (f2bps@field2base.com) to get a sub-domain set up in our system. The sub-domain will be identifier.field2base.com. This step can only be completed by Field2Base.
3. Load the metadata for the Mobile Forms application from your Identity Provider. You can use either an endpoint URL or an XML file.
Optional Settings Available
A. Require Users to Always Login using SSO - Check this box to require all your Users to use SSO when logging in. If unchecked, you can set SSO requirements at a User level by checking the "Require User to Always Login using SSO" checkbox in the User Profile. Default is unchecked. We do not recommend enabling this setting when first setting up SSO to avoid any log in issues for your existing User base.
B. Enable Auto-Creation of New SSO Users - Check this box if you want new Users to be created in Field2Base when they first log in using SSO. Default is unchecked.
C. Default Role - You can select a default Role for any new Users who are automatically created using the auto-creation setting (B). Default is blank and new Users will have no roles.
D. Select Portal Login URL for
E-Mail Notifications – This allows you to select which URL, either "Mobile Forms Portal" or "SSO Portal", is included in system e-mail notifications. For example, when a new User is created and they receive an email with their credentials including the URL for where to log in. Default is "Mobile Forms Portal". We recommend updating this to "SSO Portal" if you require all of your Users to log in with SSO (A).