Setup - Single Sign-On (SSO)

Setup - Single Sign-On (SSO)

SSO Overview

Single sign-on (SSO) is an authentication system that allows your users to access online applications like Safari by simply logging into your company's network.  In other words, rather than you having a separate user ID and password for Safari, we direct the login to your company's network login, and if you have already logged in you can access Safari directly.  Thus, SSO eases your company's password management and improves security for accessing remote applications.

What SSO Protocols does Safari support?

  1. SAML 2.0. The Security Assertion Markup Language (SAML) protocol is the industry standard for SSO.  SAML exchanges authorization and authentication data in XML format; the main parts of this exchange are the user, the identity provider, and the service provider. 
  2. Other Standards.  While Safari recommends using the SAML protocol, Safari can support certain other protocols if necessary.

How to Set Up SSO - SAML 2.0       

When implementing new customers, Safari creates an SSO Setup Guide specifically for your company, which includes step-by-step instructions, FAQs, background information about the Safari application, our authentication and security architecture, and specific technical support contacts.  To view a sample of this Guide, please download the document below.

How to Set Up Auto User Provisioning via SCIM       

SCIM is an open-standard protocol that simplifies how you manage identities in cloud-based applications.  It enables your company to create, update, or deactivate a wide variety of user accounts with minimal effort via Auto User Provisioning.  If your system supports SCIM, you can enable it with your SSO integration to Safari.  This enables synchronization of users and capabilities between your IDP and Safari.  Enabling SCIM disables manual user creation and manual editing of synchronized attributes.

Your IT group can configure Safari roles and permissions with your connected identity provider (IdP) from one place, giving your employees and outside partners access to the systems they need without multiple sign-ons.  You can ensure that users can access only resources they’re authorized to use.  Auto User Provisioning via SCIM is a Safari add-on security feature.  Please contact your Customer Success Manager at customer-engagement@safarilaw.com for pricing details when you're ready to implement. 
Note: Safari partners with your IT department to enable this feature.

Creating Users Not on SSO Network       

Sometimes your company will want to temporarily assign work on Safari to outside counsel, who won't have SSO capability.  (In fact, Safari is well suited for this type of temporary collaborative work.)  Your company can create non-SSO users just like regular users, who can log in with a normal User ID and password.  

Is there a question we haven't answered?  Please send it to us at support@safarilaw.com. 

    • Related Articles

    • Setup - Users

      This help page for system Owners and Admins covers the following topics: Viewing List of Users Creating/Editing Users Includes information about adding outside counsel as users System and Access Permissions Deactivating Users Individual users can ...

    • Setup - Auto User Provisioning via SCIM

      Auto User Provisioning Overview Auto User Provisioning enables your company to integrate an external user directory with your Safari account. You can connect your identity provider with Safari to automatically provision and de-provision users in your ...

    • Setup - Compliance Policies

      Overview Safari's built-in features and configuration options help your company ensure compliance with your legal processes and company policies. See the outline below of the features and configuration options to help you maintain compliance ...

    • Setup - Subtypes

      Overview NOTE: Only system Owners can edit Subtypes. For more information see Setup - Users. Safari requires a Subtype field in every matter. You can use and configure Subtypes for several purposes, including matter assignment, workflows, transfers ...

    • Setup - Invoices

      Overview This help page addresses the following topics about setting up invoicing in Safari to charge the serving party for your subpoena response costs: Safari's approach to invoicing Invoice practices by other companies (comparative data) Setting ...