Setting up SAML SSO (generic guide)
The metadata you need from us, and what we need from your IdP.
Updated
If you're using a SAML-compliant IdP we don't have a dedicated guide for, follow this generic flow.
Step 1 — Get our service-provider metadata
Open Workspace → Settings → SSO and copy these values:
- ACS URL — the callback URL where your IdP posts the SAML response.
- Entity ID — our SP identifier.
- Certificate — for signed responses.
Step 2 — Create a SAML app in your IdP
In your IdP, create a new SAML application using those values. Configure attribute mapping:
| Attribute | Value |
|---|---|
NameID |
User's email |
firstName |
User's first name |
lastName |
User's last name |
Step 3 — Paste the IdP metadata back
Your IdP will give you a metadata XML or a few values (SSO URL, Issuer, X.509 cert). Paste them into the SSO settings page in HelloCivic.
Step 4 — Test
Click Test connection. We'll attempt a SAML round-trip and show you any errors. Once it succeeds, click Enable.
Domain verification helps
Pair SSO with domain verification so your team can auto-join without invites.
Troubleshooting
Was this article helpful?
Your feedback helps us improve our docs.