SAML SSO Setup

An overview on how to set up SAML SSO in Mooncamp.

SAML SSO described
Setting up SAML SSO

SAML SSO described

SSO means “Single Sign-On” and this function allows you to use your Microsoft or Google account to sign in without having to create a new password. At Mooncamp, we offer Microsoft and Google SSO per default as well as SAML SSO for identity providers like Okta. With SAML SSO you can integrate your existing single sign-on solution into your Mooncamp account. It is possible to integrate with any SAML 2.0 identity provider.

💡

Please note: SAML SSO is available for our customers in the Enterprise Plan. In case you would like to use SAML SSO, please ask your Mooncamp contact person our our support team for more details.

Setting up SAML SSO

💡

Integrating SAML SSO is a technical process, therefore we recommend that someone from your IT department assists you during the configuration.

In order to set up SAML SSO in your account, navigate to the settings and then to Identity and Provisioning Settings. There you will find three options:

Allow login via password
Allow login via Google
Allow login via Microsoft

We recommend choosing one and deactivating the others for security reasons. Although, depending on how your organization is structured, it might make sense to allow multiple options.

In order to correctly fill-in the fields below SAML, please use the following instructions:

As a first step, when setting up the SAML integration on your side, please use the following configurations (Mooncamp can integrate with any SAML 2.0 identity provider):

ACS-URL: https://app.mooncamp.com/api/v1/saml/acl

Entity-ID: https://app.mooncamp.com/api/v1/saml/metadata

Please make sure to add a custom value with the name email that matches the user's email address.

As a last step, copy your SAML application's metadata and paste it into your SAML configuration detail section within your Identity and Provisioning Settings.

💡

Important note: Your IT administrators might need to first approve Mooncamp as a provider before you can use SAML SSO. Further, it is important for the setup of SAML SSO that the email address of a user in Mooncamp is the same as at your identity provider.

Once you have made sure everything is set up correctly, the users just need to be added to your Mooncamp account with their Microsoft or Google e-mail and they will be able to log in using the Login via SSO button.

💬

If you have any questions, you can always contact our support team: support@mooncamp.com