Skip to main content

Setting up Workspaces SSO

Workspaces allow employees to sign-in to access and use their Workspace in the browser.

Requirements​

  1. An SSO Provider and administrative access to the tool such as Azure, Okta, or Google.
  2. A subdomain for your Workspace, we will breakdown how to easily configure that in the console below.

Getting Started​

Workspaces require a Single Sign-On application to allow employees to sign-in to access and use their Workspace in the browser.

Creating a Workspaces Subdomain​

Before setting up your SSO application you must create a Workspaces subdomain where you will be able to access your workspace. For example, {your_workspace_subdomain}.knacktab.com.

To create your subdomain, navigate to Settings > Access > Tenants.

View in console

Once on the Tenants tab:

  1. Select the edit button to open the modal to edit your tenant.
  2. Edit the Workspace Subdomain field and enter your subdomain. For example, mycompany, my_company, or my-company.
  3. Save your tenant.

After you have configured your subdomain you can setup your Workspace SSO integration.

Setting up SSO for your Workspaces​

To setup your Workspace SSO integration, navigate to the Integrations page from the menu on the left side of your console. You can also setup this integration from the Profiles page if you have not set one up yet you will be prompted to create one from the Workspaces tab.

View in console

From the Integrations page select the Workspaces SSO integration card.

Once you have opened the modal for the Workspaces SSO integration follow the steps below for setting up each field:

  1. Enter a Label for the integration (workspaces_sso, etc.).
  2. Enter the Sign-On Url from your SSO provider.
  3. Enter the Entity ID from your SSO provider.
  4. Certificate: Enter the certificate from your SSO provider, excluding the header and footer (----BEGIN CERT...----END CERT...).
  5. Enter a Display Name: This will be the company name shown in all Workspaces.
  6. Enter the Email Attribute Mapping Key: This is the key value for email addresses for user attributes from your SSO provider and varies from vendor to vendor.
  7. Select Connect to save the integration.
  8. After you save the integration, you will be provided with your ACS URL and Entity ID that you will use to finish configuring your SSO application with your provider.

Testing your Workspace SSO​

After getting setting up a Workspace Subdomain and Workspaces SSO integration you can go to your {your_workspace_subdomain}.knacktab.com and verify that you are able to login.

Table of Contents