Enabling ADFS SSO

Note: SSO is available on our Enterprise plan. If you are interested in enabling SSO for your company, contact our support team, or your Account Executive.

There are three steps to set up the ADFS SSO connection:

1. Set up ADFS for Process Street
2. Complete the identity provider setup
3. Verify ADFS is working properly

Step 1: Set up ADFS for Process Street

Set up the ADFS Relying Party Trust with the SAML 2.0 protocol. Process Street’s sign-in service supports SAML 2.0 only, not WS-Federation. You need two values from Process Street: the Entity ID and the ACS URL.

Once our team has turned on SSO for your organization, go to Organization Settings, open the Settings tab, and find Service provider details in the Single sign-on section. Copy the following values and use them when configuring your ADFS trust:

• Relying party trust identifier: Use the Entity ID shown in your SSO settings.
• Relying party SAML 2.0 SSO service URL: Use the ACS URL shown in your SSO settings.

Step 2: Complete the identity provider setup

When you ask our team to turn on SSO, send them the domain(s) your company will use to sign in, for example company.com or company-info.com.

Then, in the Identity provider part of the Single sign-on section, enter your ADFS Sign-In URL, click Upload certificate to add your ADFS token-signing certificate, and click Set up SSO.

Once it’s set up, test your SSO connection as an optional sign-in method before switching to Required SSO.

You will see this setting under the Settings tab:

After you’ve tested your connection, our team will run a check to ensure your organization can be locked to SSO. They will check that your users do not have any:

• Non-company domain emails (like [email protected] for example)
• Users with multiple emails
• Users with multiple organizations (generally these may be created by error)

They will work with you to fix these issues.

Step 3: Verify ADFS is working properly

Once any issues are fixed, you can switch SSO sign-in to Required in the Single sign-on section. At this point, all users within your company will be required to sign in with SSO.

You will see this setting under the Settings tab:

• Learn the 5 stages of process building in our Getting started guide
• Watch helpful videos and webinars on our YouTube channel
• Learn about Process AI
• Collect info with Forms
• Organize data with Data Sets
• Document information and policies with Pages
• Get inspired by our Blog