Configure the authentication server for SAML integration as described below.


To configure the authentication server parameters for SAML integration

  1. Open the Settings application.
  2. In the left-side menu of the Settings application page, select SAML to open the SAML configuration page.
  3. In the Configuration tab of the SAML configuration page, turn on the Enable SAML authentication switch.



  4. Specify the values of the SAML parameters and click the Save button.
  5. Wait for the message confirming that the SAML configuration was saved successfully.
  6. Select the Identity provider metadata tab and upload the Identity Provider metadata by doing one of the following:
  7. Click the Save button to save the uploaded metadata.



  8. If the authentication server is deployed separately from Web Application Platform, restart the authentication server.

SAML parameters

ParameterDescriptionDefault value
Entity IDThe entity ID of the Service Provider. It can be any string of your choice.com.nomagic.authentication.server
Name ID formatThe name ID format that contains the username of the authenticated user.urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Name ID attributeThe SAML user attribute to map to the Teamwork Cloud username instead of the SAML user name ID, which is used by default.-
Signature algorithmSAML integration requests a signature algorithm.RSA-SHA256

AllowCreate Name ID policy

If enabled, adds the AllowCreate attribute to the NameIDPolicy parameter in the SAML request.Switched on
Disable forced authentication

Sets ForceAuthn to true or false in the AuthnRequest in SAML-based authentication. Change it carefully, as you won't be able to log in with another user after logging out if this switch is turned on. This flag is only used in case the Identity Provider does not support single logout.

Switched off
AuthN contexts(Optional) If AuthN contexts need to be used, fill in one AuthN context per line.-

AuthN contexts comparison type

If AuthN contexts are used, select the AuthN Context comparison type.exact
SAML button titleThe button title displayed for the SAML user on the login page.SAML
Show SAML authentication detailed errorIf enabled, a detailed SAML authentication error text is displayed for users.Switched off
Login RelayState formatThe RelayState format for the authentication request.uuid
Logout RelayState formatThe RelayState format for the logout request.uuid
SAML user attributes for conditional user groupsA list of SAML attributes (one attribute per line) that can be used while defining conditions for conditional user groups. Learn more about conditional user groups. -