What is SSO and SAML?
SSO allows you to securely manage your administrators’ access to Arlo by integrating with your company’s central directory and authentication solution. You’ve probably used your Google or Facebook login to access other online apps. This is an example of SSO.
The Service Provider agrees to trust the Identity Provider to authenticate users. In return, the Identity Provider generates an authentication assertion, which indicates that a user has been authenticated.
SAML is a standard single sign-on (SSO) format. SAML works by passing information about users, logins, and attributes between the identity provider and service providers. Each user logs in once to Single Sign-On with the Identity Provider, and then the Identity Provider can pass SAML attributes to the Service Provider when the user attempts to access those services. Since both of those systems speak the same language – SAML – the user only needs to log in once.
Why should I use SSO?
Better security control
SSO on the management platform is very important from a security perspective.
Organisations use an extensive library of software these days. The challenge is that they need to be able to control access to these systems through a single authentication system.
When staff members come and go from a business, they need to centrally manage access to key systems. From a security perspective, if a person leaves, they need to be able to instantly remove users from all software so they cannot access it.
This is why you should use SSO. This is specifically important for Arlo which deals with large amounts of PII (Personal information).
Better usability for staff
Having to remember lots of passwords for different systems can be painful and time-consuming. With SSO staff don’t have to remember lots of passwords for different systems, they can use one password for all.
Seamless experience for customer registrations
Having SSO enabled on your checkout allows your registrants to login using the same credentials they may use for other SAML based authentication systems you provide them access to, such as custom login portals or LMS’s.
When registrants log in, all of their user data can be automatically populated into your checkout fields, streamlining the registration process and preventing duplicates from being created in your CRM.
Note: If you don’t have any external SAML authentication systems for registrants, but still want to streamline the checkout process by allowing users to login, you should use the Arlo Customer Portal.
How to enable SSO in Arlo
If you would like to use SSO, either for your management platform or in the checkout, please contact Arlo Support.
There is a one-off configuration fee to set this up and we recommend testing SSO in a sandbox platform first to ensure it’s working correctly with your Identity Provider.