You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/segment-app/iam/sso.md
+5-6Lines changed: 5 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ With SSO, you have centralized control over your users' ability to authenticate
9
9
10
10
You can configure as many IdP connections to your workspace as needed to support IdP-initiated authentication. This allows seamless migration from one system to a new one, if, for example, your organization switches IdP vendors or switches from GSuite to a dedicated SAML IdP like Okta or OneLogin.
11
11
12
-
To enable SSO-based login from the Segment login page (app.segment.com/login), you must first verify that you own the domain, and connect it to your organization's Segment account. Once you have done that, SSO users from your domain can use the Segment login page to access your default Segment workspace.
12
+
To enable SSO-based login from the Segment login page (app.segment.com/login), you must first verify that you own the domain, and connect it to your organization's Segment account. After you have done that, SSO users from your domain can use the Segment login page to access your default Segment workspace.
13
13
14
14
The Segment login page can only be connected to one workspace. To use your IdP with multiple workspaces, you will have to initiate login to the other workspaces from the IdP instead of through the login portal.
15
15
@@ -51,7 +51,7 @@ Your provider will ask you for a few things from Segment, which Segment provides
51
51
52
52
- No `RelayState` is required. This is also sometimes called `Target`.
53
53
54
-
Once you create the application in your IdP, you can come back to Segment and click "Next".
54
+
After you create the application in your IdP, you can come back to Segment and click "Next".
55
55
56
56
## Configure Segment to Talk to Your IdP.
57
57
@@ -83,7 +83,7 @@ These options are off by default, but configurable on the "Advanced Settings" pa
83
83
84
84
To configure GSuite for use with Segment, go to your workspace settings and choose the "Connections" tab under "Authentication" and click "Add New Connection." Follow the steps to create a "Google Apps For Work" connection.
85
85
86
-
You simply enter your domain (or, if you've verified it already, choose it from the dropdown) and then click the resulting link to authorize the connection.
86
+
Enter your domain (or, if you've verified it already, choose it from the dropdown) and then click the resulting link to authorize the connection.
87
87
88
88
## Enabling Segment-initiated login
89
89
@@ -93,7 +93,7 @@ In order to enable this, you'll need to verify your domain with Segment. To do t
93
93
94
94

95
95
96
-
Enter your domain and click "Add Domain." When you click verify, you're given two options to verify your domain, either using a meta tag to add to your `/index.html` at the root, or a DNS text record that you can add through your DNS provider. Once you do so and click verify, you're ready to go.
96
+
Enter your domain and click "Add Domain." When you click verify, you're given two options to verify your domain, either using a meta tag to add to your `/index.html` at the root, or a DNS text record that you can add through your DNS provider. After you do so and click verify, you can move to the next step.
97
97
98
98
> note ""
99
99
> Domain tokens expire 14 days after they are verified.
@@ -104,7 +104,7 @@ To configure SSO for multiple workspaces, your admin must configure access to ea
104
104
> warning ""
105
105
> **Warning**: This domain has already been claimed.
106
106
107
-
Once your admin has configured separate apps for each workspace in your IdP, the end-users can log in to the IdP and click on the relevant app for the workspace you are trying to access. This is also referred to as IdP-initiated SSO.
107
+
After your administrator configures separate apps for each workspace in your IdP, the end-users can log in to the IdP and click on the relevant app for the workspace you are trying to access. This is also referred to as IdP-initiated SSO.
108
108
109
109
## Okta setup
110
110
@@ -154,7 +154,6 @@ You've now completed setup. For SP-initiated SSO, follow these steps:
154
154
1. Go to `https://app.segment.com`.
155
155
2. Enter your email, select **Single Sign-On**, then click **Log In**.
0 commit comments