Implementing Single Sign-On (SSO) in Cheqroom enhances security and simplifies user access by allowing users to log in with their existing credentials from their Identity Provider (IdP). This guide provides detailed steps to enable and configure SSO in Cheqroom, supporting various Identity Providers (IdPs) such as OneLogin, Azure AD, ADFS, Okta, Google, and any SAML 2.0 or OpenID Connect compliant IdP.

General Information

Prerequisites

Before configuring SSO for Cheqroom, ensure you have:

• Administrative access to Cheqroom.
• Administrative access to your chosen Identity Provider (IdP).
• IdP support for SAML 2.0 or OpenID Connect protocols.

Enagle SSO in Cheqroom

1. Log into your Cheqroom workspace.
2. Click on Settings on the left-hand menu, then on Integrations.
3. Click Configure under your desired IdP (Google Workspace, Azure AD etc.).

Configure Cheqroom Settings

1. Select a default User Role and optionally, a default User Group.

2. Specify whether User Roles (and Groups) are sourced from your IdP or Cheqroom.

   Note: Managing User Roles and Groups

   • Via Identity Provider: User Roles and Groups are dynamically updated with every log-in.
   • In Cheqroom: New users must initially authenticate via SSO. Post-login, manage Roles and Groups within Cheqroom.

3. Enter email domains for authentication.

4. Toggle Require SSO to enforce SSO as the sole login method for non-Admin users.

5. Proceed by clicking Next, to configure the IdP setup as guided below:

   • ADFS
   • Azure AD
   • Google Workspace
   • SAML IdP
   • Shibboleth
   • Okta
   • OneLogin

Steps for ADFS

Add a Relying Party Trust

1. In the left navigation pane, click Add Relying Party Trust.