{"id":7151,"date":"2022-03-21T08:00:35","date_gmt":"2022-03-21T08:00:35","guid":{"rendered":"https:\/\/www.process.st\/help\/docs\/enabling-adfs-sso\/"},"modified":"2026-10-19T14:44:24","modified_gmt":"2026-10-19T14:44:24","slug":"enabling-adfs-sso","status":"publish","type":"ht_kb","link":"https:\/\/www.process.st\/help\/docs\/enabling-adfs-sso\/","title":{"rendered":"Enabling ADFS SSO"},"content":{"rendered":"<p><strong><i>Note: SSO is available on our\u00a0<\/i><a href=\"https:\/\/www.process.st\/pricing\"><i>Enterprise plan<\/i><\/a><i>. If you are interested in enabling SSO for your company,<a href=\"https:\/\/www.process.st\/help\/docs\/support\/\">\u00a0contact our support team<\/a>, or your Account Executive.<\/i><\/strong><\/p>\n<hr \/>\n<h4><\/h4>\n<h4>There are three steps to set up the ADFS SSO connection:<\/h4>\n<ol>\n<li><span style=\"font-weight: 400;\">Set up ADFS for Process Street<\/span><\/li>\n<li>Complete the identity provider setup<\/li>\n<li>Verify ADFS is working properly<\/li>\n<\/ol>\n<h3><span style=\"font-weight: 400;\">Step 1: Set up ADFS for Process Street<\/span><\/h3>\n<p>Set up the ADFS Relying Party Trust with the SAML 2.0 protocol. Process Street\u2019s sign-in service supports SAML 2.0 only, not WS-Federation. You need two values from Process Street: the <b>Entity ID<\/b> and the <b>ACS URL<\/b>.<\/p>\n<p>Once our team has turned on SSO for your organization, go to <a href=\"https:\/\/app.process.st\/organizations\/manage\/settings\"><b>Organization Settings<\/b><\/a>, open the <b>Settings<\/b> tab, and find <b>Service provider details<\/b> in the <b>Single sign-on<\/b> section. Copy the following values and use them when configuring your ADFS trust:<\/p>\n<ul>\n<li><b>Relying party trust identifier:<\/b> Use the <b>Entity ID<\/b> shown in your SSO settings.<\/li>\n<li><b>Relying party SAML 2.0 SSO service URL:<\/b> Use the <b>ACS URL<\/b> shown in your SSO settings.<\/li>\n<\/ul>\n<h3><span style=\"font-weight: 400;\">Step 2: Complete the identity provider setup<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">When you ask our team to turn on SSO, send them the domain(s) your company will use to sign in, for example company.com or company-info.com.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Then, in the <b>Identity provider<\/b> part of the <b>Single sign-on<\/b> section, enter your ADFS <b>Sign-In URL<\/b>, click <b>Upload certificate<\/b> to add your ADFS token-signing certificate, and click <b>Set up SSO<\/b>.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Once it\u2019s set up, test your SSO connection as an optional sign-in method before switching to Required SSO.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You will see this setting under the <a href=\"https:\/\/app.process.st\/organizations\/manage\/settings\">Settings tab:<\/a><\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-2673 alignleft\" src=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2024\/03\/Optional_SSO.png\" alt=\"\" width=\"1520\" height=\"238\" \/><\/p>\n<p><span style=\"font-weight: 400;\">After you\u2019ve tested your connection, our team will run a check to ensure your organization can be locked to SSO. They will check that your users do not have any:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Non-company domain emails (like email@gmail.com for example)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Users with multiple emails<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Users with multiple organizations (generally these may be created by error)<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">They will work with you to fix these issues.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Step 3: Verify ADFS is working properly<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Once any issues are fixed, you can switch <b>SSO sign-in<\/b> to <b>Required<\/b> in the <b>Single sign-on<\/b> section. At this point, all users within your company will be required to sign in with SSO.<\/span><\/p>\n<p>You will see this setting under the <a href=\"https:\/\/app.process.st\/organizations\/manage\/settings\">Settings tab:<\/a><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2672\" src=\"https:\/\/www.process.st\/help\/wp-content\/uploads\/2024\/03\/Screenshot-2018-08-09-17.42.47-1024x171-1.png\" alt=\"\" width=\"1518\" height=\"254\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Note: SSO is available on our\u00a0Enterprise plan. If you are interested in enabling SSO for your company,\u00a0contact our support team, or your Account Executive. There are three steps to set up the ADFS SSO connection: Set up ADFS for Process Street Complete the identity provider setup Verify ADFS is working properly Step 1: Set up [&hellip;]<\/p>\n","protected":false},"author":13,"template":"","meta":{"_acf_changed":false,"available_plan":"Enterprise","available_product":"Settings","footnotes":""},"ht_kb_category":[526],"ht_kb_tag":[527],"class_list":["post-7151","ht_kb","type-ht_kb","status-publish","hentry","ht_kb_category-security-gdpr","ht_kb_tag-sso"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb\/7151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb"}],"about":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/users\/13"}],"version-history":[{"count":7,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb\/7151\/revisions"}],"predecessor-version":[{"id":10278,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb\/7151\/revisions\/10278"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/media?parent=7151"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb_category?post=7151"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.process.st\/help\/wp-json\/wp\/v2\/ht_kb_tag?post=7151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}