SSO - Single Sign-On Support and FAQ

Q: Does Web Governance provide Single Sign-on (SSO), for such as OAuth 2.0?

A. Web Governance supports SAML 2.0 and Shibboleth Single Sign-on Systems. We do not support OAuth 2.0, however Web Governance customer authentication to the Web Governance platform is done with OAuth2 using our in-house identity provider (IdP).

Single sign-on systems save your employees time and help you avoid the potential fallout that can result from lost or forgotten passwords, as well as reduce the risk of password phishing for your company.

Steps to activate:

1. Contact the Web Governance Support team with the request. Provide:

   • An IdP metadata URL address or .xml file

     Note

     It is not always possible to retrieve your IdP metadata without first knowing the SP metadata. If this is the case, complete the rest of step 1 and then proceed to step 2.

   • Email address for login (also let us know if the address is Name-ID or an attribute)
   • Additional recommendation: If possible, include first and last name in the attributes.
2. Web Governance then provides:
   • SP metadata URL
   • ACS URL
   • Login URL
   • Logout URl
   • Entity ID.
3. When everything has been tested, Web Governance can enable enforced single page sign-on.
4. Test the single page sign-on in the Web Governance App.
   • Requirements: The person that tests the sign-on must have an Web Governance account.
   • When the test is OK, Web Governance sets up the email domains to enable single page sign-on. This will now work every time you enter Web Governance.
   • Web Governance can also enforce the single page sign-on by disabling the password sign-on fallback. This means that if the single sign-on does not work, a password option is provided. Web Governance does not use Auto provision, so when you attempt to log on with single sign-on you need to have a user registered in the Web Governance App. This is because the normal login process includes counter-checking the user email that is used against existing emails that are on the user list in Web Governance.