Single Sign On / SAML

Use the Lenses single sign-on (SSO) with the SAML 2.0 protocol.

Group-based access 

You use Lenses groups to manage what you access (authorization). These groups need to map to your groups from the SSO identity provider (IdP).

Set it up when you choose your IdP (below).

Remember to map the SSO groups to Lenses.

Setup 

1. Enable TLS (SSL) for Lenses HTTPS.
2. Create a keystore for SAML.
3. Choose your identity provider (IdP):

• Azure
• Google
• Keycloak
• Okta
• OneLogin

SAML is a Web-SSO. It needs your web-browser to complete the flow.

Questions? 

• Check the SSO FAQ .
• See all the configuration settings .