Setup - Single Sign-On (SSO)

Setup - Single Sign-On (SSO)

SSO Overview

Single sign-on (SSO) is an authentication system that allows your users to access online applications like Safari by simply logging into your company's network.  In other words, rather than you having a separate user ID and password for Safari, the Safari application directs the login to your company's network login, and if you have already logged in you can access Safari directly.  Thus, SSO helps your company make password management easier and improves security for accessing remote applications.

What SSO Protocols does Safari support?

  1. SAML 2.0. The Security Assertion Markup Language (SAML) protocol is the industry standard for SSO.  SAML exchanges authorization and authentication data in XML format; the main parts of this exchange are the user, the identity provider, and the service provider. 
  1. Auto User Provisioning via SCIM.  Auto User Provisioning enables your company to integrate an external user directory with your Safari account.  You can connect your identity provider with Safari to automatically provision and de-provision users in your account, as well as update key user information such as name, email and role.  Safari supports auto user provisioning with the System for Cross-domain Identity Management (SCIM) standard.

How to Set Up SSO - SAML 2.0       

When implementing new customers, Safari creates an SSO Setup Guide specifically for your company, which includes step-by-step instructions, FAQs, background information about the Safari application and our authentication and security architecture, and specific technical support contacts.  To view a sample of this Guide, download the document below.

How to Set Up Auto User Provisioning via SCIM       

Your IT group can configure Safari roles and permissions with your connected identity provider (IdP) from one place, giving your employees and outside partners access to the systems they need without multiple sign-ons.  You can ensure that users can access only resources they’re authorized to use, which protects your systems and applications.  Auto User Provisioning via SCIM is an add-on feature.  Please contact your Customer Success Manager for pricing details when you're ready to implement this important security feature.  Safari will partner with your IT department to enable this feature.  Please reach out to your Customer Success Manager at customer-engagement@safarilaw.com to start the conversation.

Creating Users Not on SSO Network (e.g., Outside Counsel)

Sometimes your company will want to temporarily assign work on Safari to outside counsel, who won't have SSO capability.  (In fact, Safari is well suited for this type of temporary collaborative work.)  Your company can create non-SSO users just like regular users, who can login with a normal User ID and password.  

Is there a question we haven't answered?  Please send it to us at support@safarilaw.com. 

    • Related Articles

    • Setup - Users

      This help page for system Owners and Admins covers the following topics: Viewing List of Users Creating/Editing Users Includes information about adding outside counsel as users System and Access Permissions Deactivating Users Individual users can ...

    • Setup - Auto User Provisioning via SCIM

      Auto User Provisioning Overview Auto User Provisioning enables your company to integrate an external user directory with your Safari account. You can connect your identity provider with Safari to automatically provision and de-provision users in your ...

    • Setup - Compliance Policies

      Overview Safari's built-in features and configuration options help your company ensure compliance with your legal processes and company policies. See the outline below of the features and configuration options to help you maintain compliance ...

    • Setup - Subtypes

      Overview NOTE: Only system Owners can edit Subtypes. For more information see Setup - Users. Safari requires a Subtype field in every matter. You can use and configure Subtypes for several purposes, including matter assignment, workflows, transfers ...

    • Setup - Invoices

      Overview This help page addresses the following topics about setting up invoicing in Safari to charge the serving party for your subpoena response costs: Safari's approach to invoicing Invoice practices by other companies (comparative data) Setting ...