Helios currently integrates with Google and Azure as SSO providers. SSO can be configured separately for three parts of Helios:
1) Admin Portal
2) Employee Portal (if you have purchased this module)
3) Job Portal (if you have purchased this module)
Necessary Components for All SSO Integrations
Before configuring SSO in Helios, each portal you are enabling SSO for must be set up in your SSO provider. To complete set up, you will need some information from your Helios website. To get the necessary information, follow the following click path:
1) Log-in to Helios
2) Menu
3) Settings
4) Single Sign-On
For Google SSO, please refer to the following article: https://support.google.com/a/answer/6087519?hl=en
For Azure, please refer to the following two articles:
https://learn.microsoft.com/en-us/power-pages/security/authentication/saml2-settings-azure-ad
For all SSO set-ups, the attribute mappings are the same. The value on the left is the value from the SSO provider - the value on the right is the app attribute.
1) First Name -> firstName
2) Last name -> lastName
3) Primary email -> email
4) Title -> jobTitle
Each portal you are enabling SSO for will be set up as its own app according to the instructions above. Refer to the sections below for what to put in each field.
Admin Portal SSO Setup - Google
1) In the Google admin page, for the ACS URL, enter the text from the Helios field "Helios Admin Portal URL to Redirect To".
2) In the Google admin page, for the Entity ID, enter the text from the Helios field "SSO Certificate".
3) In Helios, in the SSO URL field, enter the SSO URL from Google.
4) In Helios, in the SSO Key field, enter the SSO Certificate. Make sure to remove the 'BEGIN CERTIFICATE' and 'END CERTIFICATE' headers, including any dashes.
5) Save your changes. It can take up to an hour for Google to push SSO settings, so please wait before testing your SSO configuration.
Admin Portal SSO Setup - Azure
1) In the Azure admin page, for the Reply URL, enter the text from the Helios field "Helios Admin Portal URL to Redirect To".
2) In the Azure admin page, for the Application ID URI, enter the text from the Helios field "SSO Certificate".
3) In Helios, in the SSO URL field, enter the SSO URL from Azure.
Employee Portal SSO Setup - Google
1) In the Google admin page, for the ACS URL, enter the text from the Helios field "Helios Employee Portal URL to Redirect To".
2) In the Google admin page, for the Entity ID, enter the text from the Helios field "SSO Emp Certificate".
3) In Helios, in the SSO Emp URL field, enter the SSO URL from Google.
4) If you have not already entered this information as part of the Admin Portal setup: In Helios, in the SSO Key field, enter the SSO Certificate. Make sure to remove the 'BEGIN CERTIFICATE' and 'END CERTIFICATE' headers, including any dashes.
Employee Portal SSO Setup - Azure
1) In the Azure admin page, for the Reply URL, enter the text from the Helios field "Helios Emp Portal URL to Redirect To".
2) In the Azure admin page, for the Entity ID, enter the text from the Helios field "SSO Emp Certificate".