How to Set Up SSO with Auth0 in AIScreen Manager

This guide details the process of configuring Single Sign-On (SSO) with Auth0 for AIScreen Manager using the SAML 2.0 protocol. The steps have been adjusted to ensure accuracy and a logical sequence for a seamless setup.

Introduction:

SSO enables users to access AIScreen Manager using their Auth0 credentials, streamlining authentication and enhancing security. Auth0 will act as the Identity Provider (IdP), and AIScreen Manager will be the Service Provider (SP). We’ll configure the integration via SAML, test it, and assign users.

You’ll need:

• An admin account in AIScreen Manager.

• An admin account in Auth0 (https://manage.auth0.com).

Step 1: Log into AIScreen Manager

• Open your AIScreen manager account.
  
• Go to the Settings panel.
  
• Navigate to Single Sign-On.

Step 2: Add a New Provider

• Click Add provider.
  
• In the popup, fill in the following fields:
  
  • Displayed name — the name your SSO will have in AIScreen.
    
  • Domain — enter your company domain.
    
  • Provider type — select Auth0 (or similar if OneLogin is not listed).
    
  • Metadata URL — leave this blank for now (you will add it later).

• After entering the name and domain and selecting the provider, the system will generate:
  
  • Entity ID
    
  • ACS URL

Step 3: Configure SSO in Auth0

Next, set up Auth0 as the identity provider for AIScreen.

3.1. Log into Auth0 Dashboard:

• Open a new tab and go to https://manage.auth0.com.

• Log in with your Auth0 admin credentials.

3.2. Create a New Application:

• In the left menu, select Applications > Applications.

• Click Create Application.

• Name the application, e.g., AIScreen SSO.

• Choose Regular Web Applications as the application type.
  
• locate the Application Callback URL field.
  
• Paste the ACS URL copied from AIScreen in Step 1.

• Click Create.

3.3. Enable SAML2 Web App Addon:

• On the application’s page, go to the Addons tab.
  
• Find SAML2 Web App and toggle it on to activate.
  
• A popup with SAML settings will appear.

3.4. Configure SAML2 Web App:

• Paste this code into the “Settings” section of the same pop-up window, as shown in the example.

{
  "nameIdentifierProbes": [
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  ]
}

This code instructs Auth0 to use the user’s email as the identifier in the SAML response.

3.5. Obtain Metadata URL:

• In the same popup, go to the Usage tab.
  
• Copy the Identity Provider Metadata URL. This link contains all the necessary data (SSO URL, Entity ID, Certificate) for AIScreen.

Step 4: Complete Setup in AIScreen

Return to AIScreen Manager to finalize the SSO configuration using the Auth0 data.

4.1. Open the Provider Form in AIScreen:

• Go back to the Single Sign-On section in AIScreen Manager where you added the provider in Step 1.

4.2. Insert Metadata URL:

• Paste the Identity Provider Metadata URL copied from Auth0 in Step 3.

• Click Add provider to save the settings.

Step 5: Conclusion and Testing

5.1. Verify the Setup:

• Log out of AIScreen Manager.
  
• Go to the AIScreen login page and select the SSO option (e.g., “Auth0 SSO”).
  
• Log in with your Auth0 credentials to confirm it works.

5.2. Troubleshooting Tips:

• Login fails: Double-check the Entity ID, ACS URL, and Metadata URL for typos or mismatches.

• App not visible: Ensure the app is set to “Visible in Portal” in Auth0.

• Still stuck? Contact AIScreen support (hello@aiscreen.io) or Auth0 support with your configuration details.