What is SAML Integration?
SAML integration is the means to allow a user to authenticate with MedMe platform using their own corporations identity management service. To put it more simply, clicking login on MedMe will redirect the user to their own corporation's login service (i.e., Microsoft Login) in which they can enter their usual credentials to successfully login to MedMe without having to create another set of login credentials for each user just for MedMe.
Terms to understand
Identity Provider (IdP)
A system that creates, maintains, and manages identity information for principals (users, services, or systems) and provides principal authentication to other service providers (applications) within a federation or distributed network
example: Azure AD (Azure Active Directory)
Security Assertion Markup Language (SAML)
SAML is a standard for securely exchanging user’s identity between SAML authority (called an identity provider or IdP) and SAML consumer (called a service provider or SP). Thus defining 3 roles: the principal (user), identity provider and service provider.
Service Provider (SP)
An entity that provides Web Services that receives and accepts authentication assertions in conjunction with a single sign-on (SSO) profile of the Security Assertion Markup Language (SAML). SAML’s Service Provider depends on receiving assertions from a SAML Identity Provider.
MedMe's Setup
Service Provider (SP):
Amazon Cognito
Identity Provider (IdP):
Azure AD
Commonly used by MedMe's enterprise clients
Visually
Enterprise Client Instructions
*Instructions vary depending on the IdP
Create a new "Enterprise Application"
Create a "New Application"
Use "Non-gallery Application" as the type
Single Sign On
Choose "SAML"-based single sign on
In the section "Domain and URLs" enter the SP's Identifier (Sometimes called Entity ID), Reply URL (sometimes called ACS), and Logout URL.
MedMe will provide your unique URLs and identifiers to you via email.
Provide MedMe with Metadata
After step 2 is finished and saved, provide MedMe with the SAML Metadata
Ideally provide MedMe with both the metadata URL as well as the metadata XML
We expect to receive fields like:
First Name
Last Name
Email
Store(s)
Role
License Number (if applicable)
Add users to your new application
Add users to this application to give them access to MedMe
Configuring Attributes
Test it out!
Open Single sign-on section of your application in the Azure portal and choose button “Test SAML Settings”
