SSO Configuration
This guide walks you through configuring Single Sign-On (SSO) with Firefly using either Azure AD or Okta as your Identity Provider (IdP). For Ping configuration please contact Firefly support.
Set Up the SSO Application
Firefly uses Terraform modules to create and configure your SSO integration. Here's what we’ll do:
Assign your admins and viewers to dedicated groups
Extract SAML metadata to set up the connection
Share Your SAML Metadata with Firefly
Please provide us with the SAML metadata URL from your IdP (preferred), or the following details manually:
Sign in endpoint
Sign out endpoint
Signing certificate (PEM format)
Role Sync from IdP (Optional)
If you'd like Firefly to sync roles from your IdP, please:
Ensure users are assigned to specific groups
Let us know the exact group names
Validate the SSO Connection
Visit your dedicated Firefly login page (Provided by Firefly support team)
Log in using your IdP
You should be redirected to the Firefly platform
If your IdP manages user roles:
You should automatically be assigned as an admin (if you're in the appropriate group. Roles would be updated with first login).
SCIM Provisioning (Optional)
If you want to enable SCIM provisioning (user/group sync), it must be done via your IdP UI - Will be provided by Firefly upon request.
Need Help?
Reach out to your Firefly Customer Success manager or support.
Last updated
Was this helpful?