SSO Pre-Implementation Checklist

Single Sign-On (SSO) Pre-Implementation Checklist

Complete these items before configuring your identity provider in Foundry.

Download EVERFI’s SAML metadata file

1. In Foundry, go to Settings > Single Sign-On
2. Click View EVERFI SAML Metadata to access the service provider SAML metadata for Foundry

Request SAML metadata from your IT team (Option 1 or 2 recommended)

1. Option 1: SAML metadata URL for your organization’s IDP
2. Option 2: SAML metadata file for your organization’s IDP
3. Option 3: Manual Configuration
   • Entity ID: A globally unique name for a SAML entity, often in the form of a URL
   • Login URL: The URL to which the user gets redirected during SP-initiated SSO
   • Logout URL (optional): The URL to which the user gets redirected when logging out of Foundry. If nothing is provided, the user will be redirected to Foundry.

Provide IDP Certificate OR Certificate Fingerprint & Algorithm

1. Option 1: IDP Certificate: The X.509 public certificate that your identity provider uses to sign its SAML Assertions
2. Option 2: IDP Certificate Fingerprint AND IDP Certificate Algorithm
   • IDP Certificate Fingerprint: As an alternative to providing the full certificate, you may instead provide the fingerprint of the SAML certificate that the identity provider uses to sign its SAML assertions. You may find this tool helpful in calculating the fingerprint.
   • IDP Certificate Algorithm: The name of the algorithm used to calculate the fingerprint (e.g. SHA 256). This should be in the form of a URL.