Skip to content
English
Customer portal
Go to cynomi.com
  • There are no suggestions because the search field is empty.

Configuring SSO in Cynomi

Set up Single Sign-On (SSO) in Cynomi to simplify logins and boost security by connecting your Identity Provider (IdP) using SAML 2.0. Designed for Service Provider and Company Admins.

Audience

Service Provider Admins, Company Admins

Prerequisites

  • Admin access to Cynomi.

  • Admin access to your Identity Provider (IdP).

  • Valid SAML 2.0 configuration data from your IdP.

Steps to Configure SSO

1. Enable SSO for a Sub-Account

  1. Navigate to Sub Accounts in the Cynomi admin panel.

  2. Click the Edit icon next to the sub-account you want to enable SSO for.

  3. Toggle the SSO switch to ON.

2. Open the SSO Settings Panel

  1. Go to the Account Settings screen for that sub-account.

  2. Click on Configure SSO settings to open the configuration dialog.

3. Enter Required SSO Configuration Details

Fill out the following fields:

  • Domain: Must match the user email domain.

  • Sign-in URL: Provided by your IdP.

  • X.509 Certificate: Paste the body of the certificate without the header/footer lines.

 

Example:
-----BEGIN CERTIFICATE-----
(do not include this line)
...
(do not include this line)
-----END CERTIFICATE-----

4. Configure Identity Provider (IdP)

After entering the domain, Post-back URL and Entity ID are auto-filled:

  • Post-back URL (ACS):
    https://auth.cynomi.com/login/callback?connection=your-domain

  • Entity ID:
    urn:auth0:cynomi:your-domain

Use these values to configure the Cynomi application within your IdP.

5. Optional: Provide Metadata

You can skip manual inputs by uploading metadata:

  • XML Metadata File
    Upload the XML file provided by your IdP.

  • Metadata URL
    Provide the public link to the metadata file.

If both are provided, Metadata URL takes precedence.

6. Optional: Enable Signed Requests

If your IdP requires signed authentication requests:

  1. Enable the Sign Request toggle.

  2. A link to the signing certificate hosted on Auth0 will appear.

7. Apply the Configuration

  • Click Apply to finalize the setup.

  • SSO status and domain will now appear in the Account Settings.

  • User-level SSO status is visible in the Users table (add the column if hidden).

Deleting SSO Configuration

  1. Navigate to the sub-account’s Settings page.

  2. Click Delete SSO configuration to remove the current setup.

SSO Status Indicators

  • The configured domain appears in Account Details once SSO is active.

  • Users table shows individual user SSO statuses.

    • Add the SSO column using the “+” icon if not visible.