Setting Up Single sign-on - SSO

Roles: Admins

Setting Up Single Sign On - SSO ⚡️

Guru Teams on the Enterprise Edition can set up SAML-based single sign-on (SSO), giving your team access to Guru via the identity provider (IDP) of your choice.

If you use Google Suite, Google Auth ("Sign in with Google" button on the sign in page) is available on any Guru plan. However, as an Admin you cannot limit end users to only sign in via Google Auth.

Step 1: Set up Connection with your Identity Provider

To get started, you’ll need to set up a connection for Guru SSO, also known as a connector, with your IDP. To set up a connector, you'll need some information from Guru, which you can find in your Guru SSO Integrations page.

To access your Guru SSO Integration page:

  1. Go to your Guru Team Settings by selecting your Avatar on the upper-right hand corner of the Web App

  2. Select SSO/SCIM in the left sidebar

  3. Click the blue Settings button next to the Single Sign-On

Things Guru's SSO Integrations page providesThings you'll need from your IDP
Your Guru Team IDIDP Issuer
Guru Single Sign-On URLIDP Single Sign-On URL
Audience URIX.509 Certificate

Here is a list of IDPs we've worked with in the past:

  • ADFS

  • Microsoft Azure

  • Okta

  • OneLogin

  • PingOne

  • Centrify

  • JumpCloud

  • Google Suite

    • NOTE: We only support SSO through Google and standard SAML using a third party identity provider

Step 2: Set Up SSO inside Guru

Now that you've gathered information from your IDP, an Admin on your team can enable SSO by filling in the required information on your team's SSO Integrations page.
NOTE: You must be an Admin in Guru to see the Integration page.

Screen Shot 2018-06-24 at 9.00.43 PM.png

  1. Navigate to your Integration page in Guru's web app

  2. Fill in all the required fields with the information you gathered from your IDP

  3. Choose your Provision Type. The options are:

    1. "Automatically add users" - Guru will add the user to the team the first time they log in via SSO

    2. "Require users to be invited" - You must explicitly invite users to your Guru Team (These users must additionally have access to your IDP.)

  4. Select your Session Timeout in days (default = 14 days)

  5. When you're ready to turn it on, click Enable SSO.

Do you still have questions?

Check out Frequently Asked Questions about SSO here!

Still need help? We're here for you! 🤓

If you have any questions about Guru, please contact Guru Support by clicking "Chat with Us!" under 'Team Settings' in Guru or by sending an email to 🧠