Welcome to the Convoso Help Center

Browse our Knowledge Base of step-by-step tutorials and FAQs

Create a help ticket with our award winning Support Team Submit

Articles in this section

See more

Single Sign-On: Global Settings

Avatar
Julianne Skinner
  • Updated
Follow

Overview

Global SSO settings allow administrators to configure authentication and access for their Convoso account.

This article covers how admins can enable and manage Single Sign-On (SSO) settings to authenticate users through an external identity provider.

Contents

Global Settings

  • Click the Account main menu.
  • Click the Global Settings menu option.

The Global Settings page will open on the Global Settings tab.

  • Click the Security tab.

On the Security tab users can configure Multi-factor Authentication settings and Single Sign-On settings.

Single Sign-On Settings

Single Sign-On (SSO) is an authentication method that allows users to log in once with a single set of credentials and then access multiple applications or systems without needing to re-authenticate for each one.

Initially, only one setting shows in the Sign Sign-On Settings section.

  • The Type field will be set to Off by default.
Type

Selects the Single Sign-On (SSO) protocol used for authentication. 

  • SAML 2.0
  • OpenID Connect

Once a selection has been made in the Type drop-down additional settings will open, different settings open depending on the selection.

SAML 2.0 Settings

SAML 2.0 (Security Assertion Markup Language 2.0) is an open standard that enables SSO securely exchanging user identity and authentication data between an Identity Provider (IdP) and a Service Provider (SP).

Field Description
Entity ID

Specifies the Identity Provider (IdP). 

  • This unique identifier allows Convoso to recognize and establish trust with the configured SAML Identity Provider.
Callback URL

Specifies the Identity Provider (IdP) Single Sign-On (SSO) Login URL. 

  • Convoso redirects authentication requests to this endpoint during the SAML login process.
Certificate

Specifies the X.509 public certificate provided by the Identity Provider. 

  • Convoso uses this certificate to validate and verify SAML authentication responses received from the IdP.
Note: For SAML 2.0 integration please add following configurations to your SSO application:
  • Allowed Origin URLs: 
    • https://admin.convoso.com
    • https://agent.convoso.com
    • https://admin-dt.convoso.com
  • Allowed Callback URLs: 
    • https://agent.convoso.com/login/sso/saml/redirected
    • https://admin.convoso.com/login/sso/saml/redirected
    • https://admin.convoso.com/admin/sso/saml/test-redirected

OpenID Connect Settings

OpenID Connect (OIDC) is an authentication protocol that runs on top of the OAuth 2.0 framework. It allows the application to verify a user's identity using credentials supplied from an Authorization Server to enable Single Sign-On (SSO).

Field Description
Provider URL

Specifies the OpenID Connect provider's discovery or issuer URL. 

  • Convoso uses this endpoint to retrieve the identity provider's OpenID Connect configuration and authentication endpoints.
Client Token URL

Specifies the token endpoint provided by the OpenID Connect Identity Provider.

  • Convoso uses this URL to exchange authorization credentials for access and identity tokens during the authentication process.
Client ID

Specifies the client identifier issued by the OpenID Connect Identity Provider. 

  • This unique ID identifies the Convoso application when authenticating users through the Identity Provider.
Client Secret

Specifies the client secret generated by the OpenID Connect Identity Provider. 

  • This confidential value is used along with the Client ID to securely authenticate the Convoso application during the OpenID Connect authentication process.

Test Connection

Will open a new browser window that launches the Entity's authorization process.

Save SSO Settings

After testing the connection, save the SSO configuration by clicking the blue Apply Changes button in the bottom-right corner.