Q: Does Acquia Optimize provide Single Sign-on (SSO), for such as OAuth 2.0?

A. Acquia Optimize supports SAML 2.0 and Shibboleth Single Sign-on Systems. We do not support OAuth 2.0, however Acquia Optimize customer authentication to the Acquia Optimize platform is done with OAuth2 using our in-house identity provider (IdP).

Single sign-on systems save your employees time and help you avoid the potential fallout that can result from lost or forgotten passwords, as well as reduce the risk of password phishing for your company.

Steps to activate:

1. Contact the Acquia Optimize Support team with the request. Provide:

   • An IdP metadada URL address or .xml file

      

     Note

     It is not always possible to retrieve your IdP metadata without first knowing the SP metadata. If this is the case, complete the rest of step 1 and then proceed to step 2.

      

   • Email address for login (also let us know if the address is Name-ID or an attribute)
   • Additional recommendation: If possible, include first and last name in the attributes.
2. Acquia Optimize then provides:
   • SP metadata URL
   • ACS URL
   • Login URL
   • Logout URl
   • Entity ID.
3. When everything has been tested, Acquia Optimize can enable enforced single page sign-on.
4. Test the single page sign-on in the Acquia Optimize App.
   • Requirements: The person that tests the sign-on must have an Acquia Optimize account.
   • When the test is OK, Acquia Optimize sets up the email domains to enable single page sign-on. This will now work every time you enter Acquia Optimize.
   • Acquia Optimize can also enforce the single page sign-on by disabling the password sign-on fallback. This means that if the single sign-on does not work, a password option is provided. Acquia Optimize does not use Auto provision, so when you attempt to log on with single sign-on you need to have a user registered in the Acquia Optimize App. This is because the normal login process includes counter-checking the user email that is used against existing emails that are on the user list in Acquia Optimize.