Skip to content

SSO - Portal Setup & Login

Configuring SSO in BlueFletch Enterprise

  1. In the BlueFletch Portal, select the Admin tab, which opens to the Organization sub-tab by default.

  2. Select SSO Config and click + Add Configuration.

    Add Config

  3. In Domain field, type the company email domain that all users' email addresses will use (for example, gmail.com in the screenshot). The fields Name and Provider Id will auto-populate their respective details. ACS URL (Callback URL) is auto-filled by BlueFletch for all configs.

  4. Enter IDP Entity Id, SSO URL, and Certificate. The IdP administrator can provide these details from the IdP's management site.

  5. Enter SP Entity Id; it is the same as the Provider Id (saml.[domain name]).

    Edit Config

  6. Click Save. Screen will return to Organization, which now displays the SSO configuration.

    Config

Logging into Portal with SSO

First Time User

  1. On the login page, enter email address with company-owned domain. Press Continue.

    Portal Login

  2. Page will redirect to the associated IdP's login prompt (for example, Okta in the screenshot).

  3. Enter login credentials and submit.

    SSO

  4. Page will redirect to the BlueFletch Portal's loading screen before opening the organization's main dashboard with the user logged in with user level permissions.

    Loading

    If the user needs admin level permissions, an existing admin will need to login to change to that user's role in Organization > Users.

Common Login Problems & Solutions

  1. Email address is not already associated with IdP credentials
    The user enters email address with a company domain. The page redirects to the IdP's login prompt, but the user has no credentials for this IdP.

    • This user has not been set up by the IdP administrator yet.
    • Contact IdP administrator to create an account associated with the user's company-domain email address.

  2. SSO account is linked to G Suite and user is currently logged into a different Google account
    The user receives a 403 error, "Error: app_not_configured_for_user," while attempting to login to the BlueFletch Portal. 403 error

    • If the company uses an SSO authentication through Google's G Suite, the G Suite account must be currently logged in.
    • If no Google account is logged in, user will simply be prompted to indicate their account and login.
    • If user is not logged into the SSO account but is logged into another Google-linked account, the user will get a 403 error when logging into the BlueFletch Portal. The user must login to the account through Google.