How to configure single sign-on (SSO) for ClearSlide

ADSelfService Plus facilitates SSO for ClearSlide. If SSO is enabled for ClearSlide in ADSelfService Plus, users only have to log in to the ADSelfService Plus portal to be able to securely access ClearSlide in a single click without reentering their username and password. With ADSelfService Plus, SSO can be enabled for any SAML-based application.

Benefits of using ADSelfService Plus to implement SSO

1. Reduce password fatigue: Free users from having to remember different usernames and passwords for their enterprise applications; once they log in to ADSelfService Plus, they'll be able to access other applications without going through the verification process.
2. Implement multi-factor authentication: Secure application logins with 15 advanced authentication factors including biometrics, YubiKey, and Google Authenticator.
3. Streamline application access: Provide one-click access to all applications from a single portal.
4. Increase user adoption rate of applications: Witness increased usage of applications that foster productivity due to their ready availability in the ADSelfService Plus portal.

ADSelfService Plus supports both identity provider (IdP) and service provider (SP) initiated SSO.

IdP-initiated SSO for ClearSlide:

1. Users log in to the ADSelfService Plus portal.
2. To access ClearSlide, they can simply click on the ClearSlide icon in the Applications tab.

SP-initiated SSO for ClearSlide:

1. Users attempt to log in to their ClearSlide accounts.
2. They are redirected to the ADSelfService Plus login page.
3. They enter their credentials here, and after successful verification they are redirected to ClearSlide and logged in automatically.

Configuration steps

Prerequisites:

1. Download and install ADSelfService Plus if you have not already, and complete the basic setup.
2. Log in to ADSelfService Plus as an admin.
3. Go to Application → Add Application, and click on the ClearSlide app icon. You can also use the search bar to find the application.
4. Click on IdP Details on the top-right corner of the page.
5. In the screen that appears, copy the values of the Login URL and Logout URL. Click Download Certificate to download the SSO certificate.

   

ClearSlide (SP) configuration steps

1. Log in to your ClearSlide admin account.
2. Click on your account name in the bottom-left corner. Go to My Account, and select Single Sign-On Settings.

   

3. Select SAML 2.0 Provider in the Single Sign-On Provider drop-down list.

   

4. Configure options Automatically create user accounts and Require Single Sign-On for all users according to your preference.
5. Take note of the value provided in the Custom Login URL. You'll need this value in a later step. This value will serve as the subdomain name while configuring ClearSlide in ADSelfService Plus.
6. Enter the Logout URL saved in step 5 of prerequisites in the Single Sign-Out URL field.
7. Scroll down to the Your SAML Provider Configurations section.
8. In the SAML Provider Endpoint and SAML Provider Entity ID fields, enter the Login URL value that you saved in step 5 of the Prerequisite section.

   

9. Paste the contents of the SSO certificate you downloaded in step 5 of the Prerequisites section in the X.509 Certificate field.
10. Click Save.

ADSelfService Plus (IdP) configuration steps

1. Switch back to the ADSelfService Plus' ClearSlide configuration page.

   

2. Fill in the Application name and Description fields.
3. Select the policies for which this SSO should be enabled in the Assign Policies field.
4. Check the box next to Enable Single Sign-on.
5. Enter the name of your ClearSlide domain in the Domain Name field.
6. Enter the Custom Login URL value saved in step 5 of ClearSlide configuration in the SP Identifier field.
7. Click Add Application to save the settings.

Now, users will be able to log in to ClearSlide through ADSelfService Plus.

On enabling SSO between ClearSlide and ADSelfService Plus, ClearSlide account logons can be secured with 15 advanced authentication methods, as listed below: