Skip to main content

Single Sign-On

IO River supports any identity provider that supports the Security Assertion Markup Language (SAML) protocol. You can use your identity provider to sign in to your IO River account.

Configuring SSO​

To set up SSO for your account:

  1. Navigate to the Account page.
  2. In the sidebar, select Single Sign-On.
  3. Copy the provided fields and add them to your identity provider.
  4. Once completed, upload the metadata XML file generated by your identity provider.
  5. Click on Enable SSO.

Force SSO​

You can enforce SSO login for your account by enabling Force SSO. Once this is activated, users in your account will no longer be able to log in using a username and password.

Configuring SSO in Okta​

In case you are using Okta as your identity provider, you can follow these steps as part of step #4 above:

  1. Log in as an admin to your Okta account.
  2. In the sidebar, select Applications.
  3. Click on the Create App Integration button.
  4. Select SAML 2.0 and click Next.
  5. Fill in the App name and click Next.
  6. In the Single sign-on URL field, paste the value copied from the Assertion Consumer Service URI field in the IO River SSO page.
  7. In the Audience URI field, paste the value copied from the Audience URI field in the IO River SSO page.
  8. Under Name ID format, select EmailAddress.
  9. Under Application username, select Email.
  10. Click Next and then Finish.
  11. Once the app is created, access the Metadata URL and save the presented XML file.
  12. Upload this file to your IO River account as described in step #5 above.
  13. You can now assign users to this app.