Generic SSO Setup | Configure SSO in Sage People

1. Review SSO settings:
   1. Go to Setup > Single Sign-On Settings.
   2. Ensure SAML enabled is checked.

      

      Enable SAML

2. Select New to create a new SSO instance and give it a name. For example:

   Azure SSO

   The API Name is automatically completed based on the name.

3. Enter the Issuer. This is the entity ID from the metadata XML you downloaded in Configure SSO Service Provider step 6.

   Tip

   The entity ID from Azure goes in the Issuer box, not the entity ID box.

4. Enter the Entity ID. This is the Salesforce URL (https://xxx.my.salesforce.com). Replace xxx.my.salesforce.com with the org's custom domain.
5. For Identity Provider Certificate, select Choose File and find the certificate downloaded in Configure SSO Service Provider step 7 and upload it.
6. For SAML identity Type, select Assertion contains the Federation ID from the User object.
7. For Identity Provider Login URL, search for saml2 in the metadata saved in Configure SSO Service Provider step 6 and paste the link into this field.
8. Select Save.
9. On the Single Sign-On Settings page, in the Federated Single Sign-On Using SAML section, select the checkbox for Make Federation ID case insensitive.
10. If you use Google G-Suite as the service provider, return to the app config and enter the Sign On URL into the ACS URL field.
11. Review authentication configuration:

    1. Go to Setup > Administration Setup > Domain Management > My Domain.

    2. In the Authentication Configuration section, ensure:

       • the authentication service you configured is checked. The Authentication Configuration section uses the name you gave to the service. For example: SSO ADFS in the screenshot.

       • Login Page is unchecked. Unchecking Login Page hides the Salesforce login form, so users are automatically redirected to their selected SSO Identity Provider.

       

       SSO Authentication Configuration

12. Enable User Federation ID in the HCM package configuration. This enables synchronization of Federation ID between the Team Member and User records. Federation ID fields cannot be synchronized using field sets in the Team Member and User objects.

    1. Go to Setup > Installed Packages.
    2. Select Configure next to the Sage People Human Capital Management package.

    3. Check the User Federation ID checkbox:

       

    4. Select Save.