Single Sign On (SSO)

CloudCard integrates with any SSO IDP (Identity Provider) that supports SAML 2.0 protocol. This allows cardholders to log into CloudCard using their organization's SSO credentials. Additionally, CloudCard supports "just in time provisioning", which creates users in CloudCard the first time they log into CloudCard via SSO, which eliminates the need to manually provision users that need to submit a photo. SSO integrations are available as an add-on feature to any plan with CloudCard. 

SSO Integration Process:

1. Exchange metadata files. We'll need your production metadata .xml file (and your test metadata if you have a test instance you'd like us to use first). If you don't have a test instance, we can connect your production instance to our test environment first before switching over to production. 

a. CloudCard's metadata files can be found here:

• TEST: https://test-auth.onlinephotosubmission.com/saml/metadata
• PROD: https://auth.onlinephotosubmission.com/saml/metadata

Note: Customers using cloudcard.ca should use the below:

• TEST: https://test-auth.cloudcard.ca/saml/metadata
• PROD: https://auth.cloudcard.ca/saml/metadata

2. Determine which attributes will be passed and provide the attribute names to CloudCard on your implementation questionnaire.

3. Schedule a call with CloudCard's technical support team to test.

Note: If you have any questions regarding configuring SSO that we weren't able to answer on your kickoff call or with the explanation video, please schedule a call with our technical support team. We've always found calls to be faster than emails.