Configuring SSO with AuthO

Single sign on (SSO) with AuthO will allow users in your organization to sign in to TeamRetro using their existing AuthO account - no need to create a separate TeamRetro account.

Requirements

• You must be an ACCOUNT OWNER in your TeamRetro organization

Setup Instructions

1. Open Single Sign on Settings in TeamRetro

• Open TeamRetro
• Browse to your ORGANIZATION page
• Select the SETTINGS tab
• Select SINGLE SIGN ON from the left admin panel
• Select ADD SAML IDENTITY PROVIDER
• You will be presented with your TeamRetro service provider (SP) settings

• Leave this window open for the moment - we'll need this information to complete the configuration of the TeamRetro app in AuthO.

2. Configure Single Sign-On in AuthO

1. Go to Dashboard > Applications > Applications and either create a new application or click the name of an application to configure.
   
2. Give your application a name (e.g. TeamRetro) and select "Regular Web Applications".
   
3. Click on the Addons tab and enable SAML2 WEB APP.
   Go to the Usage tab and download the Identity Provider Metadata. Save this file locally as you will need it later. 
   
   On the Settings tab, copy and paste the LOGIN URL from TeamRetro into the Application Callback URL field
   Scroll to the bottom and click on Enable
4. Back in TeamRetro, upload the metadata that you had downloaded previously and provide a name (e.g. AuthO)
   
   Toggle on the ENABLED option and click on SAVE CHANGES.

3. Testing the Configuration

If the test was successful, you can TEST it and you should be redirected back into TeamRetro.