Auth0 SAML Configuration

This document is designed to assist CP Handheld clients with the necessary setup steps within their Identity Provider (IDP) in order to enable SAML SSO (Single Sign On) with Vinpoint.

NOTE: Setting up SSO with a client provided IDP requires prior coordination with our support team. Please do not attempt to configure this feature without first contacting support, as it involves specific prerequisites and access permissions

CP Handheld has provided you the following values for use in the below instructions:

- Post-back URL
- Entity ID
- Log Out URL

Registering the Entra Enterprise Application

In Entra, click the “Enterprise applications” link on the left.

Click the “New application” link at the top.

Click the “Create your own application” link at the top.

Create a name for your application and ensure the “Integrate any application you don’t find in the gallery (Non-gallery)” radio button is selected.

Click “Create” to create the new Enterprise Application registration.

Once the Application registration is complete, click the “Single sign-on” link on the left.

Click “SAML” option under the Select a single sign-on method section.

In the Basic SAML Configuration section, click the “Edit” button in the upper right.

Click the “Add identifier” link and enter the Entity ID value that was provided by CP Handheld.

Click the “Add reply URL” link and enter the Post-back URL value that was provided by CP Handheld.

Enter "1" for the Index value.

In the Logout Url (Optional) box, enter the Log Out URL value that was provided by CP Handheld.

Click "Save" to update the SAML Configuration.

In the Attributes & Claims section, click the “Edit” button in the upper right.

Click the “+ Add new claim” link at the top of the page.

In the Manage claim section, enter the following values:

Click "Save" to add the claim, and then click the X in the top right to close the Attributes & Claims section.

In the SAML Certificates section, click the “Download” link and download the Certificate (Base64) version of the certificate, this will need to be provided to CP Handheld to complete the setup.

Copy the values from the Set up {Application Name} section and populate the table below, these values will need to be provided to CP Handheld to complete the setup:

Provide the completed table above and the Base64 Certificate to CP Handheld to finish configuring the SSO Connection.