For partners subscribed to Enterprise plans.
In this article, you'll learn how to configure SSO on your IT Glue account using Duo.
If you are configuring SSO for MyGlue using Duo, the instructions are the same but you will need to enter different values when configuring Duo and your MyGlue account settings page. Click here to see the different values that you'll need to substitute in at key steps within this KB article.
Prerequisites
- You must have Administrator level access to IT Glue to configure SSO on your account.
- Ensure your users are provisioned in the identity provider (Duo), with exactly the same email address as their IT Glue account. We don’t create user accounts under SSO.
- Before turning this feature on, log in to your IT Glue account twice - once in a regular browser and once in an incognito/private window. This is to ensure that you are still logged in to your account if you get locked out in the other window. Alternatively, you can also log in to two separate browsers.
Instructions
Configuring Duo
- Log onto the Duo Admin Panel and navigate to Applications > Protect an Application in the left-hand menu.
- Type service provider in the search field and click Protect the Application in the search return.
- In the Service Provider section of the configuration page, enter the following information:
In the SAML Response section, use the settings shown below:
Save the application and click on Download your configuration file.
Navigate to the Duo Access Gateway server's console and click the Configure icon in the Duo Access Gateway application group.
Click Applications and then on Choose File in the Add Applications section. Locate and upload the SAML application JSON file you downloaded in step 5.
Navigate back to the Duo Access Gateway page admin console's Applications page. You will need the information in the Metadata section in the next part of this KB article.
Configuring IT Glue
After setting up Duo, you need to configure your IT Glue account to authenticate using SAML. You will need a few pieces of information from Duo to complete step.
Important. It's highly recommended that before you begin the below set of instructions, log in to your IT Glue account twice - once in a regular browser and once in an incognito/private window. Alternatively, you can also log in to two separate browsers. This is to ensure that you are still logged in to your account in case you are locked out in the other window.
- Log in to IT Glue and click Account in the top navigation bar.
- Click Settings from the sidebar.
- Click on the Authentication tab and then turn the Enable SAML SSO toggle switch to ON. Once this is turned on, a form will appear. you will need to collect information from Duo and enter it into this form.
- Click Save to complete the setup of your account.
Warning. Click Save only when all information has been entered. If you turn on SSO before the information is entered, it will break the login experience for all users on your account.
Once you make this change, you can test your account.
Configuring MyGlue
If you are setting up SSO for MyGlue, complete all steps as instructed in this article. However, there are a few key steps in which you'll need to substitute in different values:
Complete step 3 in the Configuring Duo section above but use the following values instead:
How do we disable SSO for a user?
To disable a user account, an Administrator or a Manager will need to navigate to the Account > Users page in IT Glue. We don’t currently support disabling user accounts through the SSO server.
