Self-Service Setup for Single Sign-On (SSO)

In Demandbase, admins can set up Single Sign-On (SSO) using a self-service experience. With an in-product workflow, they can configure SAML 2.0 authentication, manage identity providers, and validate their setup. This streamlines onboarding, simplifies ongoing identity management, and helps ensure secure, seamless access for users.

Prerequisites

• You must have a SAML 2.0 compatible Identity Provider (IdP).
• You must have Admin privileges or be assigned to a permission set with the required Demandbase settings access.
• For tenants created before January 20, 2026, contact Demandbase Support to enable the self-service SSO.

Create New IDP

1. From the left navigation bar, go to Settings > User Management > Identity Provider.
2. Click + Create New.
3. Enter a name for the Identity Provider (IDP) and click Next.
4. In Step 1: SAML Protocol, enter the following:
   • IDP Issuer URI: A unique identifier for your IDP.
   • IDP Single Sign-On URL: The SAML endpoint where authentication requests are sent.
   • IDP Signature Certificate: Upload the certificate used to verify SAML assertions (PEM or DER format).
5. Click Next.
6. In Step 2: User Setup, enter the following:
   • Set Email Domains: Select email domain routed to this IDP.
     Important: Contact Demandbase Support to add additional domains.
   • Manually Add Users: Enter user email addresses to assign to this IDP.
   • (Optional) Exclude Users: Enter user email addresses who should not be assigned to this IDP.
7. Click Next.
8. In Step 3: Review IDP, review your configuration, and click Create New IDP.

Edit Existing IDP

1. From the left navigation bar, go to Settings > User Management > Identity Provider.
2. Hover over the IDP, click the settings icon, and select Edit.
3. Update configurations as needed.
4. Click Edit IDP.

Deactivate or Delete Existing IDP

1. From the left navigation bar, go to Settings > User Management > Identity Provider.
2. Select from the following options:
   • Deactivate: 
     1. Go to the IDP main page, hover over the IDP, and click the settings icon.
     2. Select Deactivate and click Deactivate.
   • Delete: 
     1. First, deactivate the IDP. 
     2. Go to the IDP main page, hover over the IDP, and click the settings icon.
     3. Select Delete and click Delete.