We've made some improvements to our SSO flow to meet technical requirements, and that means you'll need to reconfigure your SSO settings to keep everything running smoothly. By following the instructions below when making this change, you can ensure that your access to the platform remains uninterrupted.
You have to update your configuration by 31.8.2025, as the old SSO flow will be discontinued after this date. If you haven't made the update by then, your users will not be able to log in.
What's changing?
The overall functionality of SSO remains the same with the new flow. There may be some slight changes to the page layout (colors, button sizes, etc.), but your experience will stay just as you know it!
However, the following changes will come with the new flow:
- The redirect domain will be updated from login.smarpshare.com to saml.smarpshare.com.
- Logging in through the identity provider's launchpad will direct users to Haiilo's login page to start the login process from there. Direct login will not be possible.
Steps for updating to the new SSO flow
1. Download the metadata from Haiilo
- Go to Administration > Settings > Single Sign-On. Only a Company Admin can see the Single Sign-On option in the list.
- Select Download metadata file from the settings. Haiilo's metadata file has been updated for the new SSO flow.
2. Set up SSO in your identity provider
We recommend setting up a new service provider application for the new SSO flow. This allows you to keep your old flow temporarily and revert to it until you have tested and validated that the new configuration works.
- Start the setup of a new Haiilo Service Provider application in your identity provider. The information that you need for the setup can be found in the metadata you downloaded in the previous step.
- Configure claims mapping. The Haiilo Service Provider supports the following attributes in the SAML assertion:
-
EmailAddress(Required - case sensitive, cannot contain any other characters, and must include capital E and A) -
Givenname(Optional) -
Surname(Optional)
-
- Assign the same users and user groups to the new application as are assigned to your current application for Haiilo. This ensures the same users will continue to have access.
- After setting up the application in your identity provider, download its metadata.
For IdP-specific instructions on setting up a SAML application, view your identity provider's documentation or our IdP-specific setup guides:
3. Upload metadata in Haiilo
- Go back to Haiilo's Administration and select Upload metadata file to upload the metadata from your identity provider.
- Then, select Test new configuration. You will be directed to log in through your identity provider. If the login flow works and you can access Haiilo, the configuration has been successful.
- If you receive an error from Haiilo, please see the I get an "Oops" error with SAML SSO. Why? article
- If you receive an error from your identity provider, please ensure your account has been assigned to the application and you are allowed to access it.
- If everything functions as intended, toggle the Use new configuration switch to replace the old configuration with the new one. If you want to revert to your old configuration, simply untoggle. Do not touch the Enable SAML switch; leave it as is.
Your users will remain logged in after the switch, but they will use the new SSO flow the next time they need to log in.
4. Update your SCIM configuration (if applicable)
If you're using the same service provider application to manage your users through SCIM, you should also transfer your SCIM configuration to the new application.
You can follow the steps in this article: Managing users with SCIM provisioning. Once the connection has been established, your users will sync with the new application.
You can also review the SCIM setup in your current application and copy the information from there. We haven't made any changes to our SCIM flow, so all values remain the same.
5. Turn off your current application
Once you've validated that the new SSO flow works and your users are managed by the new SCIM connection (if applicable), you can deactivate or delete your old application for Haiilo in your identity provider.