Implementing Single Sign-On (SSO)

What is Single Sign-On (SSO)?

Single Sign-On (SSO) is an authentication process that enables you to log in to one system once, and then gain access to multiple systems without needing to log in again for each. SSO simplifies the user experience, improves security, and reduces administrative overhead.

Which SSO options does WebAdMIT offer?

Our platform supports a range of SSO options to meet diverse client environments:

• SAML 2.0
• Supported Identity Providers (IdPs):
  • Entra ID (Previously Azure)
  • Shibboleth
  • Oracle Access Manager

Is SSO a paid service?

Yes, SSO implementation is a billable service. As SSO is not a native feature within WebAdMIT, its setup requires a one-time implementation fee and annual maintenance.

These details are outlined in the Statement of Work (SOW) and must be approved by the client prior to implementation. For more details on pricing, contact a member of your account team.

How do I use SSO?

When using SSO, you'll first need to log in to your institution's website or custom WebAdMIT site to authenticate your account. Once you're authenticated, you can go to WebAdMIT, where you'll automatically be logged in. If you don't remember your institution's custom WebAdMIT site for SSO, you can contact the Client Support Specialist team at webadmitsupport@liaisonedu.com.

Enforced SSO

SSO can be enforced at either the CAS or organization levels. If SSO is not enforced, users can use either SSO or manual login to access WebAdMIT.

If your organization wants to enforce SSO for all users, note the following:

• Only a primary contact can make this request, and they must be listed as a primary contact in the CAS Configuration Portal. See View Primary Contacts List to find this list.
• The request is specific to a CAS. For example, if Demo University wants to enforce SSO for their organizations in both CASPA and PTCAS, then both the primary contact for Demo University in CASPA and the primary contact for Demo University in PTCAS need to make requests.
• If any users have multi-factor authentication (MFA) set up, SSO will override it.

To submit a request for enforced SSO for your organization, email the Client Support Specialist team at webadmitsupport@liaisonedu.com and include the following:

• Your name
• Organization and CAS
• Date when SSO will be enforced by. We recommend at least 2 weeks from the original request date, so that you can notify your users.