Available on the Scale Plus plan.
HappyFox Chat already has built-in integrations with Okta, OneLogin and G-Suite. If you would like to integrate with any other SAML compliant Identity provider, you must use Custom SAML SSO integration.
Steps to configure Custom SAML SSO:
Only agents with ”Admin” role will be able to perform following steps.
- Go to Manage > Security
- Set the Enable single sign on to ON
- Choose your identity provider: Select Custom SAML
- Enter the following information
- idP Entity Id - For us to validate the idP
- idP SSO Target Url - The url to be redirected to when someone tries to login via SSO
- idP Signature - The SAML Certificate from your SAML server. X.509 certificates are supported and should be in PEM format
- Click on Save
Configuration in your SAML based IDP:
-
Copy paste the Access Consumer Service (ACS) URL in IDP end. This will be used to redirect agents to HappyFox Chat after authentication at your IDP.
-
The NameID format in your IDP should be EmailAddress i.e
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
. This is used to match and verify the agent in HappyFox Chat. With this attribute, the email address of the agent will be fetched from your IDP.
User Management:
HappyFox Chat account admins must add/deactivate agents manually in HappyFox Chat in Agents section to give them access to account.
User Authentication:
Agents can login to HappyFox Chat if all of these steps are done.
- Custom SAML is successfully integrated in Manage > Security section
- The agent is added in the agents section manually by admin and
- The same agent is given login access to HappyFox Chat app in your IDP end
Agents with admin role can login with email address & password as well.