How to integrate single sign-on for Proxyclick

Proxyclick is a cloud-based visitor management solution for enterprises of all sizes. Visitor registration, instant photographs, badge printing, notifications, and reporting are some of the key features of Proxyclick.

ADSelfService Plus offers support for single sign-on (SSO) for Proxyclick, enabling users to access Proxyclick and other enterprise applications with just a single set of credentials. ADSelfService Plus provides SSO using the secure industry standard Security Assertion Markup Language 2.0 (SAML 2.0).

ADSelfService Plus also offers multi-factor authentication (MFA) for Proxyclick. Leverage one or more of fifteen different authenticators available in ADSelfService Plus, such as SMS or email-based verification codes, biometric, YubiKey, Google Authenticator, RADIUS server, RSA SecurID, and Duo Security, to name a few. Using MFA, ADSelfService Plus provides better security and ensures that only authorized users have access to applications like Proxyclick.

Benefits of enterprise SSO

ADSelfService Plus' Proxyclick SSO capabilities

ADSelfService Plus supports only identity provider-initiated (Idp) SSO for Proxyclick.

IdP-initiated SSO for Proxyclick: Users need to log in to the ADSelfService Plus self-service portal first, and then click on the Proxyclick icon on the Applications dashboard to access Proxyclick.

Setting up single sign-on with Proxyclick

1. Log in to ADSelfService Plus as an administrator.
2. Navigate to Application → Add Application, and select Proxyclick from the applications displayed.
   Note: You can also find Proxyclick from the search bar located in the left pane or the alphabet-wise navigation option in the right pane.
3. Click IdP details in the top-right corner of the screen.
4. In the pop-up that appears, copy the Login URL, and download the SSO certificate by clicking on the Download Certificate link.

   

Proxyclick (service provider) configuration steps

1. Log in to Proxyclick with an administrator’s credentials.
2. Go to Account & Settings → Integration → SAML
3. Disable SAML Request Signature.
4. Paste the Login URL copied in step 4 in the Issuer and SAML 2.0 Endpoint URL fields.
5. Open the downloaded certificate as a text file. Copy and paste the content it in the Certificate text field.
6. Click Save Changes.

ADSelfService Plus (identity provider) configuration steps

1. Go to ADSelfService Plus’ Proxyclick configuration page.
2. Enter the Application Name and Description.
3. In the Assign Policies field, select the policies for which SSO needs to be enabled.
   Note: ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your Proxyclick account. For example, if you use johndoe@thinktodaytech.com to log in to Proxyclick, then thinktodaytech.com is the domain name.
6. Enter the Account ID from the SAML SSO Redirect URL available on your Proxyclick Account & Settings page in the Account ID field.

   

7. Click Add Application

Users will now be able to log in to all their applications including Proxyclick after logging in just once.