Configure SSO

Setting up single sign-on is self-service. You can do all of it from the Stairwell portal, and support is available if you want a guided walkthrough instead.

Do the identity provider side first. Find your provider in Supported Identity Providers and follow its setup guide. The Stairwell wizard asks for values your IdP produces, so starting here means stopping partway through to go and generate them.

Connect your provider

Go to app.stairwell.com and sign in.
Select the gear icon at the bottom left.
Select SSO.
Select Manage SSO Settings.
Choose your identity provider.
Work through the configuration steps. Typically these are the ACS URL, the SP Entity ID, attribute mappings, and the IdP metadata URL.
Select Continue to sign-in.

Those four values are the whole integration. The first two Stairwell gives you to paste into your IdP; the last two your IdP gives you to paste into Stairwell. If a step seems to be asking for something you do not have, you are usually partway through the wrong direction.

What happens to roles?

Nothing automatically. Your IdP establishes who somebody is; it does not decide what they can do in Stairwell.

New users still arrive with a role, and the default is Admin. See User Roles and Types, which is worth reading before you invite anyone, not after.

Changing this later

Reconfiguring an existing connection is a different procedure, because the current connection has to be reset first. See Reset SSO Settings.

If something goes wrong

Contact [email protected]. SSO misconfiguration is the one area where a bad state can lock people out, so ask early rather than experimenting.

What should I read next?

Supported Identity Providers, for your provider's guide.
Reset SSO Settings, for changing this later.
User Roles and Types, for what people can do once they are in.