Single Sign On

Overview

SAML SSO lets your organization centrally manage authentication and user access. Once enabled, users will authenticate through your identity provider, such as Okta, Azure AD, OneLogin, Ping, or any SAML-compatible system.

You’ll be asked to copy values from your identity provider (IdP) into Starbridge. After you save the configuration, Starbridge will display the remaining values you need to paste back into your IdP to complete the connection.

1. Choose your authentication mode

   In Authentication Mode, choose how your users should authenticate going forward:

   Password-only

   Users sign in using only their Starbridge password. SSO is disabled.

   SSO required

   Everyone must log in through your identity provider.

   • Password logins will be disabled
   • Ensures centralized access control and improved security

   SSO + password

   Users can choose whether to log in with SSO or with their Starbridge password.

   This mode is helpful for testing before enforcing SSO, and for phased rollouts.

2. Enter your identity provider (IdP) details

   Your IdP will provide two pieces of information that must be entered into Starbridge.

   Sign-in URL

   This is your IdP’s SAML login endpoint (often called the “SSO URL,” “Login URL,” or “Identity Provider SSO URL”). Paste the full URL from your identity provider.

   X.509 certificate

   Paste the X.509 certificate provided by your IdP. This certificate is used to verify signed SAML responses returned by your identity provider.

   Copy only the certificate text, including the ----BEGIN CERTIFICATE----- and ----END CERTIFICATE----- lines. If your IdP provides multiple certificates, use the active signing certificate.

3. Save your configuration

   After pasting your Sign-in URL and X.509 certificate, click Save.

   If the settings validate successfully, Starbridge will display the remaining values your IdP needs to complete the SSO connection.

4. Copy Starbridge values back to your IdP

   Starbridge will display your application-specific SAML details, including:

   • Domain
   • Entity ID
   • SSO URL

   Copy these values into your identity provider’s SAML configuration, then follow your IdP’s prompts to finalize.

5. Test your SSO connection

   Test logging in with SSO.

   We strongly recommend testing before enforcing SSO for all users.

Need help?

If you need assistance configuring your identity provider or troubleshooting SSO, contact [e-mail] and include:

• Your IdP (Okta, Azure AD, etc.)
• A screenshot of your SAML configuration
• The error message seen during login (if any)