Identity Provider Setup (SSO)

Civis Platform supports Single Sign On (SSO). This feature, once turned on, enables users in your organization to log into the platform using their single sign on credentials. For some identity providers, it also automatically activates and deactivates users based on their status in your system.

Civis Platform currently supports the following identity providers. Instructions for setting up SSO for each identity provider are provided below.

• Okta
• OneLogin
• Active Directory Federation Services (ADFS) - beta feature
• G Suite
• Other identity providers that support SAML are in beta. Please let us know if you are interested in using Civis Platform with another identity provider.

If your identity provider allows you to upload Civis' logo, you can download it from here.

Civis Analytics Security Team strongly suggests that customers enable the use of their own SSO provider to manage their users. This enhances the security posture of both Civis Platform and the Customer for the following reasons:

1. Mitigates having two separate systems managing users and passwords
2. Allows the customer to disable their own users.
3. Places the security boundary for logins inside the customer's security perimeter
4. Allows customers to mandate U2F keys and other security tools via their own SSO configuration
5. Gives customers insights into Civis Platform login activity via their own SSO provider

Each user that will access Civis must be provisioned in Platform before they can log in with SSO.  If you are interested in automatic user provisioning, please submit a feature request.

Support for IdP-initiated Login

By default, our SSO implementation allows for logging in from your SSO portal and from platform.civisanalytics.com.  This allows users to share Platform links that will log in via SSO as needed.  We also offer a more private version of our SSO feature that allows logins from your SSO portal only.  This is more burdensome for users, but if you are interested in this version, you can request the IdP-only version from support@civisanalytics.com.

Identity Provider Setup

Okta

Setting up Civis Platform in Okta

First, please contact your IT department and ask them to configure the Civis Platform as an application. The Civis Platform app is a pre-integrated app in the Okta Integration Network.

Setting up Okta in Civis Platform

Ask your IT department to provide the following information and please forward it to support@civisanalytics.com.

1. Signing Certificate
2. Identity Provider SAML URL
3. Identity Provider Login URL

Once you have sent this information, your Client Success Analyst can enable SSO for your organization.

OneLogin

Setting up Civis Platform in OneLogin

First, please contact your IT department and ask them to configure the Civis Platform as an application. The Civis Platform app is a pre-integrated app in the OneLogin App Catalog.

Setting up OneLogin in Civis Platform

Ask your IT department to provide the following information and please forward it to support@civisanalytics.com.

1. X.509 Certificate
2. Issuer URL
3. SAML 2.0 Endpoint (HTTP)

Once you’ve sent this information, your Client Success analyst can enable SSO for your organization.

Active Directory Federation Services (ADFS) - beta feature

Setting up Civis Platform in ADFS

First, please contact your IT department and ask them to configure the Civis Platform as a custom application. They will be asked to enter the following information:

1. Reply URL: https://platform.civisanalytics.com/users/saml/auth
2. Identifier: https://platform.civisanalytics.com/users/saml/metadata
3. User Identifier: “user.mail”

Setting up ADFS in Civis Platform

Ask your IT department to provide the following information and please forward it to support@civisanalytics.com.

1. SAML Signing Certificate - Base64 encoded
2. SAML Entity ID
3. SAML Single Sign-On Service URL

Once you’ve sent this information, your Client Success analyst can enable SSO for your organization.

G Suite

Setting up Civis Platform in G Suite

First, please contact your IT department and ask them to configure the Civis Platform as a custom SAML application. They will be asked to enter the following information: (see screenshot below)

1. ACS URL: https://platform.civisanalytics.com/users/saml/auth
2. Entity Id: https://platform.civisanalytics.com/users/saml/metadata
3. Start URL: Leave blank
4. Name ID: Set to “Basic information” and “Primary Email”
5. Name ID Format: Set to “EMAIL”

They will also need to map the following Attribute Mappings: (see screenshot below)

• first_name > Basic Information, First Name
• last_name > Basic Information, Last Name
• email > Basic Information, Primary Email

Setting up G Suite in Civis Platform

Ask your IT department to provide the following information and please forward it to support@civisanalytics.com.

1. Certificate
2. Entity Id
3. SSO URL

Once you’ve sent this information, your Client Success analyst can enable SSO for your organization.