--- title: "Configure SSO for Sanas Portal" slug: "setup-sso-to-login-to-sanas-portal" updated: 2026-02-04T10:33:11Z published: 2026-02-04T10:33:11Z canonical: "help.sanas.ai/setup-sso-to-login-to-sanas-portal" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.sanas.ai/llms.txt > Use this file to discover all available pages before exploring further. # Configure SSO for Sanas Portal ### Introduction Single Sign-On (SSO) is a quick and easy way to authenticate and provides a seamless experience for the Portal Users. This guide provides instructions to configure SSO for the Sanas Portal. ### **Prerequisites** - **Access Requirements —**Administrator privileges on the Portal and the Identity Provider (IdP) to perform configuration. - **User Invitation** — For SSO to work, ensure all Portal Users are already added to their relevant Workspaces. Refer to [Add Portal Users](/v1/docs/invite-admin-or-supervisors-on-sanas-portal) for instructions. > [!NOTE] > *Note: Users attempting to authenticate through SSO who aren’t part of any Workspace will fail authentication.* ### Configure Portal SSO Follow the procedure below to configure SSO on the Sanas Portal: #### Enable SSO on Portal 1. **Get SSO Configuration Details from Portal** 1. Log in to the **Sanas Portal** with your admin credentials. 2. Navigate to the **Settings** menu. 3. Click **Manage** under the Portal Authentication. ![Settings page showing authentication options and app activation details for Sanas Portal.](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/Untitled 4(3).png) 4. Enable the **SSO** option if it’s disabled, and copy the following: - **Identifier** - **Reply URL** (Assertion Consumer Service URL) ![Settings page for configuring SSO and SAML authentication in Sanas Portal.](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/Untitled 5(4).png) 5. In the next step, #### Prepare SSO configuration on the IdP provider As a next step, you’ll create a SAML application with your preferred IdP provider. In general, the SSO configuration steps remain common for any IdP provider. For the demonstration, we’ll configure SSO using Okta. 1. **Create a SAML Application in Okta.** 1. Log in to your [**Okta account**](https://login.okta.com/). 2. In Okta, navigate to **Applications > Applications** and click **Create App Integration**. ![Create Okta SAML app](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image5.png) 3. Select **SAML 2.0** as the sign-in method, then click **Next**. ![SAML 2.O authentication type](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image6(1).png) 4. Enter the following application details, then click **Next**: > [!NOTE] > **Note**: Application details (app name and logo) will be visible for the Portal Users. - **App Name**: Enter an app name (e.g., "Sanas Portal"). - *(Optional)* **App Logo**: Upload a logo. ![App name and logo](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image7(1).png) 5. Configure the SAML settings: - **Single Sign-On URL**: Enter the **Reply URL** you copied from the Portal. ![Single Sign-on URL](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image8(1).png) - **Audience URI**: Enter the **Identifier** you copied from the Portal. ![Audience URI](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image9.png) - **Name ID Format**: Set to **EmailAddress**. - **Application Username**: Set to **Okta username**. > [!NOTE] > Note: `Name ID Format` and `Application Username` attributes are mandatory and must be set to email address and Okta username of the users. Portal validates users using these attributes. 6. Under **Attribute Statements**, configure the following mappings: - **username**: `user.login` - **name**: `user.firstName + " " + user.lastName` - (Optional) **sanasTeam**: `user.sanasTeam` - **sanasUserType**: `user.sanasUserType` ![Attributes mapping](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image10.png) 7. Select the checkbox, then click **Finish**.![](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image12.png) 2. **Copy Sign On Details from Okta** 1. Open the created application on Okta. 2. Navigate to the **Sign On** tab and copy the **Sign On URL**. ![](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image13.png) 3. From the **SAML Signing Certificates** section, download the certificate (SHA-2 > Action > Download certificate). ![Download SAML signing certificate](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image14.png) Use the below IdP resources for SSO configurations: - [Azure AD](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-setup-sso) - [Google](https://support.google.com/a/answer/12032922?hl=en) #### Save the SSO configuration on the Portal 1. **Return to the SSO configuration window on the Portal.** 1. Enter the **Sign on URL**. ![Enter Single Sign-On URL](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image15.png) 2. Upload the **X.509 certificate** you’ve downloaded from Okta. ![Upload certificate](https://cdn.document360.io/9bc36e9c-f402-4213-b56f-4ecdf805bb1a/Images/Documentation/image16.png) 3. Click **Save** to apply the changes. 4. Perform a test authentication on the Portal using the configured SSO Okta. --- ### Troubleshooting Ensure the SSO is configured correctly for the following points: - **User present on IdP** — Ensure all the intended Portal users are already present on the IdP provider you’ve configured for SSO. - **Attributes mapping** — Ensure the following user attributes are configured during SSO configuration on IdP: - email — email added on Portal - name — name added on Portal. - **Sign On URL** — Ensure the correct Sign On URL is configured on the Portal. The portal uses this URL to authorize the user’s access. - **Certificate Upload** — Ensure the correct certificate is uploaded on Portal. --- ### Support **Need help?** Get in touch with our [Support Team](mailto:support@sanas.ai) for assistance.