SAML: Generic SSO App Configuration
Before you start
Ensure you have Admin Access to your SSO portal.
Ask your Moveworks team for your CUSTOMER_ID
: this is your organization's unique identifier which will be used to create branded urls for login.
Setup Instructions in SSO Portal
Go to your SSO's Admin Portal & create a new "Security Assertion Markup Language 2.0" (SAML
) application. Please configure your redirect and login urls based on your region as follows
- App Name: Enter
Moveworks
. - Sign-in Method: Select
SAML 2.0
as the sign in method. - SAML ACS URL (also called Single-sign on URL, destination url, recipient url): Moveworks uses the same url for sending and receiving SAML Assertions. Specify your SAML Assertion Consumer Service (ACS) URL based on your region below. Use United States as your default region, unless your organization is launched in a different data center region. Please ask your Moveworks Customer Success team for your region if you are unsure.
Region | SAML ACS URL (also called single sign-on URL, Destination URL, Recipient URL) |
---|---|
United States (default) | https://CUSTOMER_ID.moveworks.com/login/sso/saml |
Canada | https://CUSTOMER_ID.am-ca-central.moveworks.com/login/sso/saml |
EU | https://CUSTOMER_ID.am-eu-central.moveworks.com/login/sso/saml |
Australia / Asia Pacific | https://CUSTOMER_ID.am-ap-southeast.moveworks.com/login/sso/saml |
Government Secure Cloud | https://CUSTOMER_ID.moveworksgov.com/login/sso/saml |
- Audience URI (also called SP Entity ID): Enter
https://www.moveworks.com
. - Default Relay State: Enter your
CUSTOMER_ID
from the previous step.
- (Optional) Download & upload the following Moveworks icon for your application:
Finish Moveworks’ side of the integration
After the above setup is complete, provide the following information to your Moveworks Customer Success team:
- Identity Provider (IDP) Single Sign-On URL: (called
idp_sso_url
) - Issuer URL: (called
idp_issuer
) - Issuer X.509 Certificate: (called
idp_issuer_cert
)- Your certificate can be viewed or downloaded from your SSO app
- Your certificate should start with a
-----BEGIN CERTIFICATE-----
- Your certificate should end with a
-----END CERTIFICATE-----
Updated 8 months ago