SAML Settings

To access SAML configuration settings: in the main Thinfinity® Workspace page click the user profile to access the user menu and select Settings. Next, navigate to Configuration>Authentication>Authentication Methods, click Add and select SAML.

The following options are available for the SAML method:

Option	Description
Name	The name is assigned by default for easy identification within the system, it cannot be edited.
Virtual Path	Virtual Path to the authentication method service. This field is completed by default with the name of the selected authentication method.
2FA Method	If 2FA methods have been enabled for the current installation, this field displays the enabled methods. For details, see Two-Factor Authentication.
Enabled	This option is selected by default when adding the authentication method.
Service Identifier	URI of the Thinfinity Workspace installation (the computer where it is installed).
Service Certificate File	Path to the Thinfinity Workspace certificate file. Can be a self-signed certificate.
Service Certificate Password	Password for the service certificate file.
Identification Entity ID	The application ID provided by the identity service provider (e.g.: Okta).
Sign Authentication Request	Optional.
Single Sign-On Service URL	URL of the Single Sign-On Identity Provider.
Sign-Out URL	Sign Out URL (optional).
Partner Certificate File	File Path for X.509 Certificate Provided by the identity service provider (e.g.: Okta).

Reference

For step-by-step instructions on how to configure Single Sign On with different identity providers using SAML see the Single Sign-On section in our Knowledge Base.