SSO - Single Sign-On

Martus supports SSO access via the SAML2 protocol. Your IT staff can configure your company portal to allow this with IDPs such as: Azure Active Directory Okta G Suite.  With SSO, your organization can enforce its own security policies such as multi-factor authentication, etc. Even with SSO in place, you still need to set up users within Martus, because that controls their software permissions and privileges within Martus, along with their dimensional access.

To set up SSO, give this information to your IT staff

For clients in the US:

Endpoint: https://login.martus.app/saml

Entity ID: https://martus.app

For clients in Australia:

Endpoint: https://au.martus.app/saml

Entity ID: https://martus.app

For clients in Canada:

Endpoint: https://ca.martus.app/saml

Entity ID: https://martus.app

Requirements to receive from the IT staff

• SSO XML metadata file
• Login URL for your SSO provider

Enabling SSO

1. From within Martus go to Setup > SSO.
2. Browse for and select the XML file.
3. Paste the login URL into the Login URL field on the SSO page.
4. Note: The client entity ID and certificate fields will be filled in once the XML metadata file is uploaded into Martus. 

Removing Passwords to force SSO

• One at a time: 
  1. Go to Setup > Users
  2. Click the Edit button next to the user
  3. Click the Clear Password button
• All Users
  1. Go to Setup > Users
  2. Click the Clear All Passswords

Notes

• If a user is logging in and they have multiple clients that have SSO enabled, they will be presented with a list of clients from which to choose.
• Once the SSO setup is confirmed to be working, be sure to remove the passwords from all users within Martus. 
• Any Martus user with a password would be able to bypass the SSO security and log into Martus directly!  
• Martus Support generally cannot provide instructions for how to configure the  SSO provider selected by your IT staff. However, you can use these instructions to configure SSO within Azure Active Directory.
• Send the Martus logo file below to your IT staff. It has been tailored for use on the "Martus" button they create in your portal for users to access Martus.
• As an Administrator you can allow specific users to bypass SSO but sending those users the "Set up password" email. This is helpful if you need to add users to Martus who do not have access to the domain utilized for SSO.