• Home
• App Integrations
• Single Sign-On Integrations
• Lithium Single Sign-On

Lithium Single Sign-On SSO

---

Single Sign-On (SSO) solution by miniOrange provides secure Single Sign-On access into Lithium using a single set of login credentials. You can log into Lithium using miniOrange credentials or Azure AD credentials or any of your existing identity providers. With miniOrange SSO services, along with Lithium you can also login into other On-Premise and Cloud Applications using your existing Identity Providers/User Store (Azure Active Directory, Okta, Ping) credentials . Follow the given setup guide to integrate SAML SSO for your Lithium account.

miniOrange and Lithium Single Sign-On (SSO) integration supports the following features:

• SP Initiated Single Sign-On (SSO)
• IdP Initiated Single Sign-On (SSO)

Follow the Step-by-Step Guide given below for Lithium Single Sign-On (SSO)

1. Configure Lithium in miniOrange

• Login into miniOrange Admin Console.
• Go to Apps and click on Add Application button.



• In Choose Application, select SAML/WS-FED from the application type dropdown.



• Search for Lithium in the list, if you don't find Lithium in the list then, search for custom and you can set up your application in Custom SAML App.

• First of all you need an active Lithium account with administrator rights to access the required details for configuring the SSO into miniorange.
• Enter the SP Entity ID or Issuer value as “Lithium” or any other value of your choosing.
• Enter the ACS URL : Your Lithium subdomain URL.
• Enter the Single Logout URL.
• Click on Save to proceed further.



• Click on Save.

To get miniOrange metadata details in order to configure Lithium :

• Go to Apps >> Applications.
• Search for your app and click on the icon ' ' in Actions menu against your app.
• Click on Metadata to get metadata details, which will be required later. Click on Show SSO Link to see the IDP initiated SSO link for Lithium.



• Here you will see 2 options, if you are setting up miniOrange as IDP copy the metadata details related to miniOrange, if you required to be authenticated via external IDP's (Okta, Microsoft Entra ID, Active Directory, ADFS, OneLogin, Google Workspace) you can get metadata from the 2nd Section as shown below.



• Keep SAML Login URL, SAML Logout URL and click on the Download Certificate button to dowmload certificate which you will require in Step 2.

2. Configure SSO in Lithium

• In your web browser, go to the following URL and sign in: https://{your_subdomain}.lithium.com



• Send the XML file you downloaded in the Step 1 to Lithium for SSO configuration on their end.
• Navigate to Community Admin > System > SSO.

  Turn on Lithium single sign-on (SSO)	Check this box to turn on the SSO.
  URL to registration page	This is the destination URL of the Register link.This is the destination URL of the Register link on the Community’s Home screen, at the top left corner.
  URL to login page	Copy SAML Login URL from Metadata file you downloaded in Step 1. (This is the destination URL of the Sign In link on the Community’s Home screen, at the top left corner. If SSO is turned on, this link sends SAML requests to the URL)
  URL to logoff page	Copy SAML Logout URL from Metadata file you downloaded in Step 1 (If set, your user will be redirected to this URL when signing out. If you want users to also log out from Admin Portal, enter the Single Logout Service location found in your IdP metadata file.




• Click Save

3. Test SSO Configuration

Test SSO login to your Lithium account with miniOrange IdP:

Using SP Initiated Login

• Go to your Lithium URL, here you will be either asked to enter the username or click on the SSO link which will redirect you to miniOrange IdP Sign On Page.



• Enter your miniOrange login credential and click on Login. You will be automatically logged in to your Lithium account.

Using IDP Initiated Login

• Login to miniOrange IdP using your credentials.



• On the Dashboard, click on Lithium application which you have added, to verify SSO configuration.





Not able to configure or test SSO?


Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

External References

• Single Sign-On (SSO)
• What is Single Sign-On (SSO) and How does SSO Work?