Dashboard

SAML

Teams on an enterprise plan can configure SAML Authentication for their team.

By default, users who sign in through their organization's SAML Connection are granted Vewier membership. To elevate their permissions, a Team Admin must adjust their role via the Team Settings page in the Evervault Dashboard.

SAML is only available for teams on enterprise plans. Please contact support to enable SAML for your team.

Prerequisites

The user configuring SAML from the Evervault Dashboard must be a team admin. You will also need admin access to your IdP to complete the setup from the provider.

By default, the email domain of the admin configuring SAML is allowlisted as a discovery realm. To add further domains please contact Evervault support.

Setup

  1. Navigate to Team Settings -> Security in the Evervault Dashboard.
  2. Click the "Configure" button next to "Single sign-on (SAML) to begin configuring your SAML connection.
  3. Input your SAML sign-in URL and upload the your IdPs x509 cert in .PEM or .CER format. Optionally you can enable sign-out and provide a sign-out url.
  4. Press the "Create SAML Connection" button, once the Connection has been created successfully you will see a "Configured" badge next to SAML settings.
  5. Press the "Settings" button to view your Connection's metadata.
  6. Evervault only requires a single SAML attribute mapping. To configure this, set the mapping of "Primary email" to the app attribute email. Below is an example of what this looks like when using Google as an IdP.

On this page