Demandbase Support can assist with setting up Single Sign-On (SSO) for your users. With SSO enabled, users can sign in to Demandbase One using your company’s identity provider (IDP), such as Okta or Google.
SSO setup is optional. If enabled, it becomes the exclusive authentication method for users, other sign-in options are disabled unless re-enabled with assistance from Demandbase Support. See Understanding and Troubleshooting Demandbase One Log In.
Demandbase supports the following SSO protocols:
- OpenID
- SAML 2.0
Prerequisites
You must be able to input a Relay State URL (usually only a challenge for homegrown solutions).
Setup
- Create a stub application in the SSO provider system.
-
Provide the following information to the Demandbase Support team:
- IdP Issuer URI
- IdP Single Sign-On URL
- IdP Signature Certificate
- Email domain (e.g., @demandbase.com or @an.demandbase.com)
-
The Demandbase team creates a corresponding Identity Provider and Routing Rules, then shares the following information back with you:
- Assertion Consumer Service URL
- Audience URI
- Relay State URL
- Go to the stub application you’ve created in your SSO provider and enter the information provided by Demandbase.
Testing
- Confirm the setup steps are complete and ask Demandbase Support to enable the connector; either for a specific individual conducting the testing, or for the whole team.
-
Test the connection in two ways:
- Navigate to the Demandbase Platform from your SSO homepage.
- Log out of SSO and navigate to web.demandbase.com
Deployment
- Inform your team that their login process has changed, and they must sign in using SSO.
-
Create user profiles in Demandbase.
Important: Demandbase does not support Just-In-Time Provisioning. For new users, create the user in Demandbase One first. - (Optional) If you’re using a system such as OKTA, you can include a Demandbase image file for the tile.
Troubleshooting
If a user is unable to sign in with SSO, check the following:
- User is signing in from the SSO tile, or from the correct web site: web.demandbase.com
- User has a Demandbase user profile.
-
If you want to create an exception to your tenant-level rule (for example, a contractor with a different email domain), contact Demandbase Support.