SAML-based single sign-on (SSO) gives members access to Datasite through an Identity Provider (IDP) of their choice.

 

Step 1: Contact Us

Fill out the appropriate request form depending on if you are:

• Currently logged into a project
• Not currently logged into a project
   

Step 2: Configuration and Testing

To establish a connection with the Datasite platform, we’ll need some information. If available, please upload a metadata file to the SSO request form where indicated, with the attributes below.

• Email Domain(s)
• IDP (Identity providers) URL
• IDP UUL path
• IDP Issuer ID
• Cert

The Datasite-specific attributes you will need for configuring the connection include:

• Service Provider URL: https://auth.datasite.com/sp/ACS.saml2 (for best results, copy and paste, rather than selecting the hyperlink)
• Audience/Service Provider Entity ID: DataSiteOne
• Cert

Datasite can send you a metadata file with the attributes above.

Datasite requires the following attributes in the assertion:

• Unique ID maps to the SAML Subject
• Email Address in the assertion. The unique ID is mapped in the assertion. Other attributes are ignored.

The Datasite team will safelist a subset of users from your organization to test the connection. During configuration and testing, all users not safelisted will continue to log in as normal. Upon completion, all users associated with the designated company-owned domain(s) must utilize SSO.
 

Step 3: What to Expect Next

Once testing is completed, the Datasite team will coordinate a time with you for training and converting all remaining users to SSO. The Datasite team can provide a list of users requiring conversion, and email templates to notify them of the upcoming login changes. When desired, the Datasite team will convert all users to SSO. All users with matching domains will then log in via your Identity Provider.