Setting up a SAML connection to Superchat requires a joint meeting with our team. Please reach out to your account manager to schedule the appointment. Please note that SAML and SSO logins are only available for enterprise customers.
Please complete the following steps before your joint meeting with our team. This allows us to activate the connection quickly and smoothly during the meeting.
Create a SAML app in your identity provider
Create a new SAML application in your identity provider – for example Microsoft Entra, Google Workspace, or any other provider of your choice.
Microsoft Entra
Create a custom non-gallery enterprise app
Once your enterprise app has been created, go to the Single sign-on tab, click SAML, and retrieve the basic details and set up the attribute mapping.
Make sure you have the following data ready to share with us in advance:
Sign-In URL – the URL to which SAML authentication requests are sent
User ID Attribute (URL) – the attribute that uniquely identifies the user
X509 Signing Certificate – in PEM format; we use RSA-SHA256 for request signing
Configure attribute mapping
Set up the following attribute mapping in your SAML app:
{
"name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
"email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
"roles": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/role",
"groups": "http://schemas.xmlsoap.org/claims/Group",
"user_id": [
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"
],
"given_name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname",
"family_name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname",
"email_verified": "email_verified"
}
Please note the following:
The email_verified field must be mapped to a field in your identity provider that always returns the value true – for example, "Account enabled" in Microsoft Entra.
The user_id field can be set to any unique identifier of your choice.
In the meeting
During the joint meeting, we will set up the SAML connection to Superchat. For this, we will also need all e-mail domains that should be enabled for the connection.
During the meeting, we will provide you with all the URLs you need to add to your enterprise app.