Skip to main content
Sign in Submit a Ticket

How can we help?

Setup Single Sign On (SSO) in RMS

How to Activate Single Sign On (SSO) in RMS

 

Overview

Single Sign On (SSO) allows users to access multiple applications using a single login with an Identity Provider.

Single Sign On (SSO) centralises user authentication to a single Identity Provider (IdP) that can provide access to multiple configured applications.

Activating SSO in RMS will require users to be authenticated by the Identity Provider to access RMS.

⚠ Important: RMS must be set up in the Identity Provider before activating SSO in RMS. Activating SSO in RMS without completing the necessary setup in the IdP will lock all users out of RMS.

 

Setup

The following setup will need to be completed by the IT Administrator and an RMS System Administrator.

 

Step 1 - Add RMS in the IdP

This step is performed outside of RMS and should be completed by the IT Administrator.

Add RMS as a SAML Application or Endpoint with the Identity Provider (IdP) using the information below.

RMS Entity ID: https://app.rmscloud.com

RMS Digital Registration Card Entity ID: https://app12.rmscloud.com/sso/ClientID?appId=13

Assertion URL: (by Region)

Login URL: (by Region)

  • APAC: https://app12.rmscloud.com/sso/ClientID
  • EMEA: https://app14.rmscloud.com/sso/ClientID
  • Americas: https://app13.rmscloud.com/sso/ClientID

Attributes

  • Name: ClientID
  • Value: Your RMS Client Number

*Note: Replace ClientID with the properties RMS Client ID. For Enterprise Properties, this is the Owner's RMS Client ID. 
 

★ Tip: SSO can be configured separately for the Live and RC environments. To configure SSO for RC, use the RC URL. For example: https://rcapp.rmscloud.com/sso/ClientID 
★ Tip: The complete property-specific URL can be obtained by logging into RMS using an Internet Browser and copying the URL after successful login.
✎ Please Note: IT Administrators should consult the documentation of their Identity Provider for further assistance with this step.

Important:

Complete the following before continuing.

✓ Add RMS to the IdP

✓ Test SSO Login in the IdP

✓ Download the Issuer Certificate

Step 2 - Setup SSO in RMS

After RMS has been added to the Identity Provider, SSO can be activated in RMS.

Selecting the SSO Username Type as 'Federation ID' will require a Federation ID to be setup on all RMS Users before continuing.

✎ Please Note: SSO cannot be trialled independently in the RMS Training Database.

Use the 'Test Login' or 'Test Application' feature within the IdP to ensure RMS has been added correctly prior to activating SSO in RMS.

 

Have your System Administrator complete the following.

In the Side Menu of RMS, go to Setup > Security

  1. Navigate to the 'SSO' tab.
  2. Select the '+' (Add) icon to open the SSO Configuration dialog (or select an existing environment row and click the pencil edit icon to update it).
  3. Select the Environment. 
    Please Note: New SSO configurations can be created for Live and RC only.
  4. Toggle 'SSO Enabled' on.
  5. Enter the Issuer.
  6. Upload the Identity Provider Certificate.
  7. Enter the Login URL.
  8. Enter the Logout URL.
  9. Select the SSO Username Type.
  10. Select the SSO Username Location.
  11. Optional: Enter the Attribute Name (required if 'Username is in an attribute element' is selected).
  12. Optional: Enter the Name ID format.
  13. Select 'Save & Exit'.
    Screenshot of the SSO Configuration dialog in RMS on the Security setup screen SSO tab, showing the SSO tab in the Security sub-nav, the Add (+) icon on the grid toolbar used to open the dialog, fields for Environment, Issuer, Identity Provider Certificate, Login URL, Logout URL, SSO Username Type, SSO Username Location, Attribute Name, and Name ID format, and the Save & Exit icon on the dialog header to save the configuration and close the dialog.
✎ Please Note: New SSO configurations can only be created for the Live and RC environments. If an existing SSO configuration for Beta or another legacy environment is already in place, it will remain visible in the list and can be viewed, disabled, or deleted - but cannot be recreated once removed.
⚠ Warning: Users will be locked out of RMS if the appropriate setup and testing have not been completed in the IdP before saving.

✎ Please Note: Identity Provider Certificates will be in the file format of .txt, .cer, or .pfx.
Selecting the SSO Username Type as 'Federation ID' requires a Federation ID to be setup on all RMS users before continuing.
Selecting the SSO Username Location as 'Username is in an attribute element' requires an Attribute Name to be specified.

 

Finished

SSO is now active in RMS.

Users will need to be logged in and authenticated with the Identity Provider to gain access to RMS.

★ Tip: Use the URL below in the Internet Browser to access the RMS Training Database when SSO is active in RMS.
Replace ClientID in the URL below with the property's RMS Client ID.

https://app.rmscloud.com/sso/ClientID/training

 

 

Related to:

Was this article helpful?

We're sorry to hear this article was not helpful, please let us know why here, so we can make it better.

Thanks for the positive feedback! We'd love to hear more, let us know here.

Return to top

Related articles

Comments

0 comments

Please sign in to leave a comment.

Contact us