• Home
• App Integrations
• Single Sign-On Integrations
• Rippling Single Sign-On

Configure Rippling as SAML IDP for SSO

---

miniOrange Identity Broker service solution enables cross protocol authentication. You can configure Rippling as an IDP for Single Sign-On (SSO) into your applications/websites. Here, Rippling will act as an Identity Provider (IDP) and miniOrange will act as a broker.

We offer a pre-built solution for integrating with Rippling, making it easier and quick to implement. Our team can also help you set up Rippling as SAML IDP to login into your applications.

Prerequisite:

• To get started you need to have an active Rippling account with administrator rights for your organization.
• Get the miniOrange SP metadata that you will require in the first step. For this, go to the miniOrange Admin Console >> Identity Providers >> Add Identity provider. Under Choose Identity Provider, select SAML from the dropdown and go to SAML Provider. Then click on the Click here link.



• Click on Show metadata Details under For SP - Initiated SSO. Keep ACS URL and Entity ID or Issuer which you will require in Rippling console in Step 1.

Steps to setup Rippling as an IDP and miniOrange as a Service Provider (SP) for SSO login

1. Configure miniOrange as Service Provider (SP) in Rippling

• Login to your Rippling domain as an Account Administrator.
• Navigate to Home >> IT Management >> Custom App from the left navigation bar.



• Click on Create New App button on the top right corner.



• Enter the Name, Select category and Upload Logo according to your application.
• Select Single Sign-On (SAML) app type. Click on Continue.



• Confirm that you are the Application Admin. Click on Continue.



• The SSO Setup instructions page will be visible. This will include the IdP Metadata XML file. Download the XML file which will be required later for the miniOrange configuration.



• Click on Move To Next Step.
• You will be asked to provide ACS URL and Entity ID. Enter the values which we got from Prerequisites.



• Complete the remaining setup with desired settings.

2. Configure Rippling as Identity Provider (IDP) in miniOrange

• Go back to the miniOrange Admin console and navigate to Identity Providers in the left navigation menu. Then, click on Add Identity Provider button.



• In Choose Identity Provider, select SAML from the dropdown.



• Search for SAML Provider.



• Click on Import IDP metadata.



• Upload the XML metadata file that you downloaded from the Rippling in Step 1 using the Import IDP Metadata feature.
• Enter the IDP Name as Rippling, select File as the IDP Metadata format and upload the XML file.
• Then click on the Import button.



• Your IDP metadata details will be auto-filled.
• Scroll to Enable for Enduser Login and enable the toggle.
• Click on Save.

3. Test Connection

• Visit your Login Page URL.
• Go to Identity Providers tab.
• Search for your app, click the three dots in the Actions menu, and select Test Connection against the Identity Provider (IDP) you configured.



• On entering valid Rippling credentials (credentials of user assigned to app created in Rippling), you will see a pop-up window which is shown in the below screen.



• Hence your configuration of Rippling as IDP in miniOrange is successfully completed.

Configure Attribute Mapping

• Go to Identity Providers.
• Click the three dots in the Actions menu, and select Attribute Mapping against the Identity Provider (IDP) you configured.

• Attribute Type - USER
• Attribute Type - EXTERNAL

Maps information, such as email and username, during Just-In-Time (JIT) user creation. Email and Username attributes are necessary to create the user profile.

• Click on the + Add Attribute button to add the attribute fields.



• Check the attributes in the Test Connection window from the previous step. Choose any attribute names you want to send to your application under Attribute Name sent to SP.
• Enter the values of the attributes coming from IdP into the Attribute Name from IdP field on the Xecurify side.

EXTERNAL mappings help alter incoming attribute names before sending them to apps, ensuring that the data is in the correct format.

• Click on the + Add Attribute button to add the attribute fields.



• Check attributes in test connection window from last step. Enter the attribute names (any name) that you want to send to your application under Attribute Name sent to SP.
• Enter the value of attributes that are coming from IdP into the Attribute Name from IdP field on the Xecurify side.

External References

• More info about Rippling SAML SSO guide
• SP-Initiated v/s IdP-Initiated SSO
• Rippling single sign-on for WordPress using OAuth