Connect an SSO Service to Paligo

To use an SSO service with Paligo, the service has to be configured to communicate using Security Assertion Markup Language (SAML). Usually, this configuration work is performed by IT specialists who have an in-depth understanding of the SSO service.

To help you set up your SSO service to work with Paligo, we have:

General instructions (see procedure below).

These cover the main principles and most SSO services require similar information.
Separate instructions for the following SSO services, which are special cases and need different configuration:

In your SSO provider:

Create one user account for each Paligo user account.
Create a custom SAML 2.0 application.
Configure the SAML 2.0 application. The terminology used for the settings can vary, but you will need to:
1. Set the Assertion Consumer Service (ACS) URL for Paligo, the endpoint where the SSO service provider connects to Paligo.
  
  Use this URL: https://your.paligoapp.com/saml/acs. Replace your with the domain name of your Paligo instance, for example: https://acme.paligoapp.com/saml/acs
2. Set the Service Provider (SP) URL for Paligo.
  
  Use this URL: https://your.paligoapp.com/saml/metadata. Replace your.paligoapp.com with the domain name of your Paligo instance.
3. Set the application user name or ID to: email
4. Create attribute mapping for Paligo's user credentials:
  - user.firstname
  - user.lastname
  - user.email
  Note
  
  There may be additional settings required, depending on your SSO Service.
5. Map them to the equivalent attributes in your SSO service. Refer to your SSO service documentation for information on those.
Create a group attribute for Paligo. Depending on the SSO service you are using, this should have the name / value paligo.usergroup or paligo_usergroup.
Export the SSO service's metadata file so that you can import it into Paligo.

Create a user group for each Paligo user group. This step is required in some SSO services, whereas with others, you can add the user group name to the user settings.

In Paligo, every user account belongs to a user group, such as administrators, authors, contributors, reviewers, publishers, it admins or translation managers. When users log in to Paligo using SSO, Paligo needs the SSO service to provide the user group information (as well as the first name, last name and email). User groups are not included in the default metadata, so you need to add them in your SSO service.

User group syntax	Description	API access	License type
paligo.admin	Use this value if the user should belong to the group of Paligo administrators. Administrators are top-level users with access to all Paligo features, including those for adding and changing user accounts, managing languages and integrations on the Settings page. Full authoring experience.	Full access	Author license
paligo.user	Use this value if the user should belong to the group of Paligo authors (standard users). Authors (Standard users) are Paligo writers. Full authoring experience. Can use the main Paligo Editor and its advanced features that are needed for creating, publishing and managing content, including content reuse, filtering and variables.Create Assignments, Create Snapshot in Resource View and change to any workflow status in the Resource View. Can use both Review View and Edit View to change content, add content and Create Snapshots in Edit View in Contributor Editor. Can access the Translation View and translation features. These include translation assignments, translation import and export. Also the ability to change workflow status to In translation and In translation review in the Resource View.	Full access	Author license
paligo.contributor	Use this value if the user should belong to the group of Paligo contributors. Contributors are users who, besides reviewing content, may also need to add or edit content, such as engineers or subject matter experts (SME). They can use both the Edit View and Review View. Both Reviewers and Contributors can be sent Review assignments, the difference is that Contributors can switch to Edit View. That enables them to edit and add information and also to Create Snapshots in Edit View.	No access	Contributor license
paligo.reviewer	Use this value if the user should belong to the group of Paligo reviewers. Reviewers are users who need to read content and leave feedback comments on it, but do not change the content in anyway. They have access to Review View.	No access	Reviewer license
paligo.itadmin	Use this value if the user should belong to the group of Paligo IT admins. IT administrators have access to the Settings page. They can create users, set up integrations, manage languages and adjust the general settings of the Paligo instance.	No access	IT admin license
Important Custom licenses are available on the Enterprise plan. These offer some ability to configure what features users have access to. For more information about what options are available to you, contact your account manager. Access to API, depends on license configuration.

Associate each user account with the appropriate user group.
Associate each user group with the SAML 2.0 application that you have created to represent Paligo.
In Paligo, use the SSO integration settings to Connect Paligo to your SSO Service.

Articles in this section

Note

Important

Comments

Product

Resources

Support