Please note that if you have more than one Academy, you will need to go set up SSO separately for each Academy. Academies cannot share the same SSO setup.
Getting Started
Navigate to your Academy Settings and select 'Registration'.
Uncheck the box for "Allow Registration via Username and Password" and check the box for "Allow Registration via SSO."
Note: If you would like to allow users to register using either username + password or SSO, you can check the box for both registration options.
Then you'll want to go to the SSO Type drop-down menu, select "SAML".
You will need to provide three pieces of information:
Identity Provider Issuer - A URL that uniquely identifies your SAML identity provider.
Single Sign-On URL - This is the SSO URL that WorkRamp will direct your users to when they access WorkRamp.
Certificate - This is the certificate WorkRamp will require to verify your user's identity during the sign-on process. This should be provided by your SSO provider. If you have any trouble finding this certificate, contact your SSO provider or the WorkRamp team.
Set-up within Google Suite
When configuring SSO for WorkRamp within Google Suite, please make sure to input the following Service Provider Details:
ACS URL: [Academy URL]/saml/consume
Entity ID: [Academy URL]/saml/metadata
Name ID Format: EMAIL
Running an SSO Test
Once you have finished adding your SAML Settings, we recommend running a quick test to make sure it works.
IMPORTANT: Make sure you run this test in an incognito window or a separate browser.
You should also run this test during non-peak hours or for a short period of time. This will lock out any users if the configuration is not set up properly.
Locking Custom Registration Fields
If you are syncing over Custom Fields via SSO and do not want users to be able to manually edit these fields, you can lock the fields using the "Locked" checkbox for the field on the Registration Settings page.
