Step 1: Access

One of the first steps to setting up Stairwell will be around authentication and authorization. Stairwell requires an Identify Provider (IdP) to be used to managed A&A, and Stairwell supports a few options. In order to complete Step 1, you'll need to select and complete one of the two options below. Once you've completed this, you'll be able to log into Stairwell and move onto Step 2.

Option 1: Bring your own IdP (Recommended)

This option would leverage your existing IdP to managed which users are granted access to Stairwell. Stairwell supports a large amount of IdPs today, for the full list click here. This is the recommended approach because it puts the control of user access in your hands. Stairwell can send a magic link which will allow for self-service setup, or we can coordinate with the Customer Success team to configure and verify the federation together.

Details Needed:

• SP Entity ID
• ACS URL
• Application Federation Metadata URL
• Attribute Mapping (user.id, user.emailAddress, user.firstName, user.lastName)

📘

Role Based Access Control (RBAC) isn't currently supported so no group attribution/assertion should be provided. If there is a desire to restrict access for specific users, please inform support

---

Option 2: Use Stairwell's IdP

This option would leverage the Stairwell IdP to manage which users are granted access to Stairwell. This process involves you providing a list of users and emails to setup so they can be created in the Stairwell IdP. This process does take longer than the customer managed option due to the additional layer of management.

Details Needed:

• Domain(s)
• FirstName(s)
• LastName(s)
• EmailAddress(es)

📘

There may be additional costs to using Stairwell's IdP.