SSO Information

What is single sign-on?

Single sign-on (SSO) is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials.

How does SSO work?

SSO works based on a trust relationship between an application, known as the service provider, and an identity provider, like Okta, Azure, CyberArk, etc. This trust relationship is often based on a certificate exchanged between the identity provider and the service provider. This certificate can be used to sign identity information sent from the identity provider to the service provider so that the service provider knows it is coming from a trusted source. In SSO, this identity data takes the form of tokens that contain identifying bits of information about the user, like a user’s email address or a username.

SSO at Stadium

Stadium is SAML 2.0 enabled and has partnered with various Identity Providers to provide seamless login to our customers. We are listed for SSO support under common IdP marketplaces like Okta, Microsoft Azure, and CyberArk. However, if you don’t see your IdP, don’t worry, as long as it supports SAML 2.0 we should be able to provide SSO. Please get in touch with support at hi@bystadium.com with details and we’ll get back to you with instructions.

The Stadium SAML integration currently supports the following features:

  • SP-initiated SSO
  • IdP-initiated SSO
  • JIT (Just In Time) Provisioning
  • SP-Initiated Single Logout

How can you enable SSO for your organization?

Enabling SSO on Stadium is a straightforward process.

  1. Find our application by searching for “SnackMagic” (our very first brand) in the application catalog of Okta, Microsoft Azure, or CyberArk.
  2. Install the application for your organization in your IDP account.
  3. Email hi@bystadium.com with the following details:
    a. Single Sign-on URL
    b. Single Logout URL (optional)
    c. Certificate
  4. Leave everything else on us to do.

After we receive the above details we’ll create a corresponding configuration in our backend to enable SSO. This process typically takes 4-6 business days to configure and test.

Once SSO is enabled for your email domain, all the users using the same email domain will be redirected to your IDP immediately.

For any further queries, please contact hi@bystadium.com.

By Stadium