Enable Single Sign On (SSO)

Single Sign On (SSO) simplifies the login process, allowing users to log in to a service provider (SP) application, such as ExtremeCloud IQ, using their credentials from an existing SAML-enabled identity provider (IdP).

Key features of SSO:

Unified Access: Log in once and gain access to all integrated services without repeated logins.
Improved Security: Using a single, strong password, to reduce the risk of security breaches associated with weak or reused passwords, enforce multi-factor authentication based on your IdP policies, and deny administrative access to ExtremeCloud IQ by removing users from the IdP.

This task provides an overview of all the SSO management options available in ExtremeCloud IQ.

Hover over , and then select Global Settings.
From the ADMINISTRATION menu, select Enable Single Sign On (SSO).
To enable SSO, you must create an Identity Provider (IdP) profile in ExtremeCloud IQ, see Add an IdP Profile.
To manage an existing IdP profile, from the list of IdP profiles, find the row of the profile you want to manage, select , and then from there you can:
1. Manage certificates, see Manage IdP Profile Certificates.
2. Edit an existing IdP Profile, see Manage IdP Profiles.
3. Enable or disable an IdP profile. Select Enable, or select Disable and then select Disable again to confirm.
  
  Note
  If disabled, users of the domain defined in the IdP profile will not be able to log in to ExtremeCloud IQ.
4. Delete an IdP profile. Select Delete, and then select Delete again to confirm.