{"id":10303,"date":"2026-10-22T14:53:34","date_gmt":"2026-10-22T14:53:34","guid":{"rendered":"https:\/\/www.process.st\/help\/?post_type=ht_kb&#038;p=10303"},"modified":"2026-10-22T14:53:34","modified_gmt":"2026-10-22T14:53:34","slug":"enabling-safenet-sso","status":"publish","type":"ht_kb","link":"https:\/\/www.process.st\/help\/docs\/enabling-safenet-sso\/","title":{"rendered":"Enabling SafeNet Trusted Access SSO"},"content":{"rendered":"\r\n<p><strong>Note:<\/strong> SSO is available on our <a href=\"https:\/\/www.process.st\/pricing\">Enterprise plan<\/a>. If you are interested in enabling SSO for your company, contact our <a href=\"https:\/\/www.process.st\/help\/docs\/support\/\">support team<\/a>, or your Account Executive.<\/p>\r\n\r\n\r\n\r\n<p>There are three steps to set up SSO with Thales SafeNet Trusted Access (STA):<\/p>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li>Set up the SafeNet Trusted Access application.<\/li>\r\n\r\n\r\n\r\n<li>Enter identity provider details in Process Street.<\/li>\r\n\r\n\r\n\r\n<li>Verify SSO is working properly.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Already using SafeNet with Process Street?<\/h2>\r\n\r\n\r\n\r\n<p>From <strong>December 1, 2026<\/strong>, Process Street no longer signs SAML authentication requests. If your SafeNet Trusted Access application checks the signature on incoming requests, sign-in will stop working, so change one setting before then:<\/p>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li>In the SafeNet Trusted Access console, open the <strong>Applications<\/strong> tab and select your Process Street application.<\/li>\r\n\r\n\r\n\r\n<li>In the <strong>Authentication Request Signature Validation<\/strong> section, select <strong>Skip request signature validation<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Click <strong>Save Configuration<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Let our <a href=\"https:\/\/www.process.st\/help\/docs\/support\/\">support team<\/a> know it&#8217;s done, so we can confirm sign-in still works.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n<p>Leave everything else as it is. Your application, its users and groups, and its signing certificate stay the same, and SafeNet keeps signing the responses it sends to Process Street. Your users sign in exactly as before.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Step 1: Set up the SafeNet Trusted Access application<\/h2>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li>Sign in to the SafeNet Trusted Access console as an administrator.<\/li>\r\n\r\n\r\n\r\n<li>On the <strong>Applications<\/strong> tab, click <strong>+<\/strong> to add an application, search for <strong>Generic Template<\/strong>, and add it.<\/li>\r\n\r\n\r\n\r\n<li>Name the application <strong>Process Street<\/strong>, set <strong>Integration Protocol<\/strong> to <strong>SAML<\/strong>, and click <strong>Add<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Click <strong>Manual Configuration<\/strong>. Copy the <strong>Single Sign-On Service<\/strong> URL, and download the STA tenant certificate. You will enter both in Process Street in Step 2. Click <strong>Next Step<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Choose <strong>Manual Configuration<\/strong> again. To fill in these fields, go to <strong>Organization Settings<\/strong> in Process Street, open the <strong>Settings<\/strong> tab, and find the <strong>Service provider details<\/strong> section, below the <strong>Single sign-on<\/strong> section. Copy the values into SafeNet:\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Entity ID<\/strong>: paste the <strong>Entity ID<\/strong> from your Process Street SSO settings.<\/li>\r\n\r\n\r\n\r\n<li><strong>Assertion Consumer Service URL (POST binding)<\/strong>: paste the <strong>ACS URL<\/strong> from your Process Street SSO settings.<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1760\" height=\"444\" src=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-service-provider-details.png\" class=\"wp-image-10300\" alt=\"The Service provider details section in Organization Settings, showing the ACS URL and Entity ID to copy into SafeNet\" srcset=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-service-provider-details.png 1760w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-service-provider-details-300x76.png 300w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-service-provider-details-1024x258.png 1024w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-service-provider-details-768x194.png 768w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-service-provider-details-1536x387.png 1536w\" sizes=\"auto, (max-width: 1760px) 100vw, 1760px\" \/><\/figure>\r\n<\/li>\r\n\r\n\r\n\r\n<li>Under <strong>User Login ID Mapping<\/strong>, choose the user&#8217;s email address, so that SafeNet identifies each user to Process Street by email.<\/li>\r\n\r\n\r\n\r\n<li>In the <strong>Authentication Request Signature Validation<\/strong> section, select <strong>Skip request signature validation<\/strong>. Process Street does not sign authentication requests, so a validated signature would block every sign-in. Leave response encryption off.<\/li>\r\n\r\n\r\n\r\n<li>Click <strong>Save Configuration<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Click <strong>Assign<\/strong> and choose who can use Process Street: <strong>All Users<\/strong>, or the user groups that should have access. Click <strong>Save Configuration<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Make sure an access policy on the <strong>Policies<\/strong> tab covers the Process Street application for those users.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Step 2: Enter identity provider details in Process Street<\/h2>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li>In Process Street, go to <strong>Organization Settings<\/strong>, open the <strong>Settings<\/strong> tab, and scroll to the <strong>Single sign-on<\/strong> section.<\/li>\r\n\r\n\r\n\r\n<li>In the <strong>Identity provider<\/strong> section, paste the <strong>Single Sign-On Service<\/strong> URL from SafeNet as the <strong>Sign-In URL<\/strong>.<\/li>\r\n\r\n\r\n\r\n<li>Click <strong>Upload certificate<\/strong> and choose the STA tenant certificate you downloaded.<\/li>\r\n\r\n\r\n\r\n<li>Click <strong>Set up SSO<\/strong>.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1760\" height=\"636\" src=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-identity-provider.png\" class=\"wp-image-10301\" alt=\"The Identity provider section in Organization Settings, with a SafeNet Single Sign-On Service URL entered as the Sign-In URL\" srcset=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-identity-provider.png 1760w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-identity-provider-300x108.png 300w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-identity-provider-1024x370.png 1024w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-identity-provider-768x278.png 768w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-identity-provider-1536x555.png 1536w\" sizes=\"auto, (max-width: 1760px) 100vw, 1760px\" \/><\/figure>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Step 3: Verify SSO is working<\/h2>\r\n\r\n\r\n\r\n<p>SSO starts as optional, so users can still sign in with a password while you test it. Sign in with SSO as one of the users you assigned in SafeNet. Once it works, change <strong>SSO sign-in<\/strong> in the <strong>Single sign-on<\/strong> section to <strong>Required for Admins, Builders and Users (but not Guests)<\/strong>, or to <strong>Required for everyone (including Guests)<\/strong>. From then on, those users will be required to sign in with SSO.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1760\" height=\"704\" src=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-sso-sign-in.png\" class=\"wp-image-10302\" alt=\"The SSO sign-in setting in the Single sign-on section of Organization Settings, set to Optional\" srcset=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-sso-sign-in.png 1760w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-sso-sign-in-300x120.png 300w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-sso-sign-in-1024x410.png 1024w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-sso-sign-in-768x307.png 768w, https:\/\/www.process.st\/help\/wp-content\/uploads\/2026\/10\/safenet-sso-sign-in-1536x614.png 1536w\" sizes=\"auto, (max-width: 1760px) 100vw, 1760px\" \/><\/figure>\r\n\r\n\r\n\r\n<p>If a sign-in fails, check that the Entity ID and ACS URL in SafeNet match Process Street exactly, and that <strong>Skip request signature validation<\/strong> is selected. For more on SSO options, see <a href=\"https:\/\/www.process.st\/help\/docs\/single-sign-on-sso-at-process-street\/\">Single Sign-On (SSO) at Process Street<\/a>.<\/p>\r\n\r\n","protected":false},"excerpt":{"rendered":"<p>Note: SSO is available on our Enterprise plan. If you are interested in enabling SSO for your company, contact our support team, or your Account Executive. There are three steps to set up SSO with Thales SafeNet Trusted Access (STA): Already using SafeNet with Process Street? From December 1, 2026, Process Street no longer signs [&hellip;]<\/p>\n","protected":false},"author":2,"template":"","meta":{"_acf_changed":false,"available_plan":"","available_product":"","footnotes":""},"ht_kb_category":[526],"ht_kb_tag":[527],"class_list":["post-10303","ht_kb","type-ht_kb","status-publish","hentry","ht_kb_category-security-gdpr","ht_kb_tag-sso"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb\/10303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb"}],"about":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/users\/2"}],"version-history":[{"count":5,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb\/10303\/revisions"}],"predecessor-version":[{"id":10309,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb\/10303\/revisions\/10309"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/media?parent=10303"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb_category?post=10303"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb_tag?post=10303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}