Configure SP-Initiated Single Sign-On in CloudCheckr
With Service Provider (SP)-initiated Single Sign-On (SSO), you log into your identify provider (IdP) from the CloudCheckr user interface.
This procedure will show you to configure your SP-Initiated SSO in CloudCheckr.
Prerequisites
To use SP-Initiated SSO, you must:
- be an enterprise customer
 - purchase the Standard (includes a basic sub-domain) or Premium (includes a fully-customized domain) white label package
 - have a custom URL
 
Here is a quick summary of the levels of customization we offer in CloudCheckr where:
 = fully customizable
 = partially customizable
NA = not available
| 
                   Feature  | 
                
                   In-App Customization  | 
                   Standard  | 
                
                   Premium  | 
          
| 
                   Header Logo  | 
                 
                   
  | 
                
                   
  | 
                
                   
  | 
              
| 
                   Browser Tab Favicon  | 
                
                   
  | 
                
                   
  | 
                
                   
  | 
                
| 
                   Color and Theme  |  
  | 
                
                   
  | 
                
                   
  | 
| 
                   Landing Page Text  | NA  | 
                
                   
  | 
                
                   
  | 
| 
                   Customer Signup/Login Pages  | 
                  NA  | 
                
                   
  | 
                
                   
  | 
| 
                   Email Domains  | NA  | 
                
                   
  | 
                
                   
  | 
| 
                   URL  | NA  | 
                
                   CloudCheckr subdomain  | 
                
                   
  | 
Procedure
- Follow the procedure for
            IdP-initiated SSO, but replace all instances of "app.cloudcheckr" with your custom URL.
            
The screenshot shows an example from the setup for PingOne:
             - Navigate to the white label (WL) login screen.
           
          
You can get to this page through a link or logging out of the white labeled customer.
 - Click the SSO Login button for the IDP you want to use.
            
If this customer has multiple IdPs, there will be a button for each IDP.
            The IdP prompts you to login with your IdP credentials.
 - Once you are logged into your IdP successfully, the normal SSO process proceeds.