Getting Started with SAML SSOs

Integrating Single Sign-On (SSO) via SAML 2.0 connects your client's company store directly to their corporate identity management platform. This enhances your client's organization’s security, simplifies user access control, and allows their team to log in seamlessly using their existing everyday corporate credentials. This document will help ensure a smooth implementation of a SAML SSO on your client's company store.

Please note that the entire integration process typically takes about 2 weeks to allow for configuration and thorough testing of both the SSO setup and the store login flow. However, this timeline may vary depending on how quickly the end-client communicates and provides the required technical information.

If you're new to SSOs, review our Introduction to Single Sign-On (SSO) help guide before continuing. 

Step 1: Determine the SAML SSO scope 

The first step is figuring out whether your client needs Standard or Advanced SSO. You will work directly with your OMG Success Manager or Sales Rep to review the project details and determine the right fit.

Here are the main things to consider when choosing your tier:

• You may want to go with Standard if...

  • It's a brand-new store setup without existing users

  • You only need to sync three basic data points (First Name, Last Name, Email) dynamically as people log in

  • You don't need to pre-load users
     

• You may need to go with Advanced if...

  • You need to upload a user list before launch

  • You need to handle pre-existing user accounts

  • You need to pass advanced custom fields to our system. 

💡 If Advanced SSO is required, reach out to your OMG Success Manager or Sales Rep via email at hello@ordermygear.com.

Step 2: Connect the technical teams

Once your client's SSO level (Standard or Advanced) is confirmed, we are ready to connect the OMG tech team with their IT department! The OMG tech team will take the lead on this—but to get this started you'll need to reach out to provide us with your client's IT contacts.

• The Kickoff Email: Our first point of contact will be an SSO kickoff email sent directly to your client's IT team. This email provides the relevant information they need to configure the SSO in their Identity Provider, and requests the information we need to configure it on ours. 

• No Worries, We’ll Keep You in the Loop! You will be CC'd on all technical conversations so you stay completely aligned as we head toward launch.

Step 3: Configuring the SSO

Once the OMG tech team receives the required assets from your client’s IT department, the configuration process begins. The OMG tech team will use that information to set up the store's SSO exactly the way your client needs it.

• What Your Client's IT Team Does: They use the URLs we provided in Step 2 to build out the connection inside their Identity Provider (like Okta or Azure).

• What the OMG Tech Team Does: We take the information they sent back and use them to connect the store's to the client's secure SSO login.

• What You Need to Do: We may need you to jump in and help facilitate a conversation and join meetings, but our technical team will lead the technical conversations where you need us to.

Step 4: Testing & Verification

Before the store goes live to all employees, we want to make sure the connection is seamless and secure. Your client's team will need to run a thorough test of the SSO login flow to guarantee everything works as expected.

• What Your Client's Team Does: They will have a few test users access the store and log in via SSO to confirm everything works. They'll specifically check:

  • Store lockdown level: Is the store's visibility restricted exactly as needed?

  • User login flow: Are users forced to log in at the right times?

  • User creation & attribute assignments: Are users created successfully and are their attributes (like names and emails) assigned correctly?

• What the OMG Tech Team Does: We'll check logs to confirm success SSO logins have occurred and stand by for any changes you client may need. 

• What You Need to Do: Help your client understand the different lockdown levels and user flows so together you guys can choose the best solution for your client's needs. 

Once we get a successful "green light" test, the store is officially ready for launch day.

That’s It!

By following these four steps, you can confidently navigate the SSO conversation without needing to be a technical expert. But, if you have specific questions about any of these steps, reach out to techteam@brightstores.com - we're here to help!