We've made some improvements to our SSO flow to meet technical requirements, and that means you'll need to reconfigure your SSO settings to keep everything running smoothly. By following the instructions below when making this change, you can ensure that your access to the platform remains uninterrupted.

General information on what's changing 

The overall functionality of SSO remains the same with the new flow. There may be some slight changes to the page layout (colors, button sizes, etc.), but your experience will stay just as you know it!

However, the following changes you might notice will come with the new flow after you have set up the configuration:

• The redirect domain will be updated from login.smarpshare.com to saml.smarpshare.com.
• Logging in through your identity provider's launchpad will direct users to Haiilo's login page to begin the login process. This means that clicking the Haiilo option in your IdP launchpad will lead the user to the Haiilo login page, where they must still have to select "Log in with Single Sign On" to initiate the login. As a result, direct login from the IdP is not possible.

Steps for updating to the new SSO flow

1. Download the metadata from Haiilo

1. Go to Administration > Settings > Single Sign-On. Only a Company Admin can see the Single Sign-On option in the list.
2. Select Download metadata file from the settings. Haiilo's metadata file has been updated for the new SSO flow.

2. Set up SSO in your identity provider

We recommend setting up a new service provider application for the new SSO flow. This allows you to keep your old flow temporarily and revert to it until you have tested and validated that the new configuration works.

See our individual guides for setting up a SAML application, based on your organization's IdP:

3. Enable new SSO configuration metadata in Haiilo

After testing that your new SSO configuration works, you can enable the new flow:

1. Toggle the Use new configuration switch to replace the old configuration with the new one. If you want to revert to your old configuration, simply untoggle. Do not touch the Enable SAML switch; leave it as is.

Your users will remain logged in after the switch, but they will use the new SSO flow the next time they need to log in.

4. Update your SCIM configuration (if applicable)

If you're using the same service provider application to manage your users through SCIM, you should also transfer your SCIM configuration to the new application.

You can follow the steps in this article: Managing users with SCIM provisioning. Once the connection has been established, your users will sync with the new application.

You can also review the SCIM setup in your current application and copy the information from there. We haven't made any changes to our SCIM flow, so all values remain the same.

5. Turn off your current application

Once you've validated that the new SSO flow works and your users are managed by the new SCIM connection (if applicable), you can deactivate or delete your old application for Haiilo in your identity provider.