Configure Single Sign-On (SSO)

In this guide, you will configure Single Sign-On (SSO) to allow your users to access Radiant Security through your Identity Provider (IdP). Setting up SSO ensures a secure and streamlined login experience, while centralizing authentication and access management.

Supported Identity Providers

We currently support SSO with the following Identity Providers:

• Okta

• Google

• Microsoft Entra ID

Configure SSO for Okta

Use Okta as your SSO provider to let users access Radiant securely and easily, with centralized identity management and enforcement of your organization’s authentication policies.

Configure Okta as a SAML 2.0 identity provider for Radiant, so your users can authenticate via your company’s Okta portal.

Prerequisites

• Admin access to Okta Admin Console

Create SAML application

1. Log in to the Okta Admin Dashboard, then click Applications.

   
2. Click Create App Integration.

   
3. Select SAML 2.0 as the sign-in method and click Next.

   
4. Name the app (e.g., Radiant) and click Next.

   
5. In the SAML Settings section:

   • Single sign-on URL: The value is provided by Radiant in the setup.

   • SP Entity ID (Audience URI): The value is provided by Radiant in the setup.

   • Name ID format: EmailAddress

   

Assign users or groups

1. Go to the Assignments tab of the app.

2. Click Assign > Assign to Groups and select the groups that should have access to Radiant via SSO.

   

Submit metadata to Radiant

To complete the setup, send us your identity provider metadata.

1. In the Okta's Sign On tab, scroll to the SAML Signing Certificates section.

2. Click View SAML setup instructions.

3. Copy the Identity Provider Metadata URL.

Configure SSO for Google

Use Google as your SSO provider to let users access Radiant securely and easily, with centralized identity management and enforcement of your organization’s authentication policies.

Configure Google as a SAML 2.0 identity provider for Radiant, so your users can authenticate via your company’s Google portal.

Prerequisites

• Write access to Google Workspace Admin Console

Create a SAML application

1. Log in to your Google Workspace dashboard and click Web and mobile apps in the sidebar.

   
2. Click Add app and click Add custom SAML app.

   
3. Enter the name of your application (e.g., Radiant Security), then click Continue.

   
4. Skip to the next screen by clicking Continue.

   
5. Copy the ACS URL and Entity ID values from Radiant’s SSO setup and paste these values into Google’s. The Name ID format should be EMAIL.

   

Assign users or groups

1. Under Service status, enable ON for everyone for the SAML application you just created.

2. Click Save.

Submit metadata to Radiant

To complete the implementation of SAML SSO, you need to provide Radiant with your identity provider’s details.

1. Click Download metadata.

   
2. Upload the Metadata file downloaded from the previous step into Radiant.

   

Configure SSO for Microsoft Entra ID

Use Entra ID as your SSO provider to let users access Radiant securely and easily, with centralized identity management and enforcement of your organization’s authentication policies.

Configure Entra ID as a SAML 2.0 identity provider for Radiant, so your users can authenticate via your company’s Entra ID portal.

Prerequisites

• Admin access to Azure Portal

Create SAML application

1. Go to Azure Portal, open the portal menu and select Enterprise applications.

   
2. Click New application.

   
3. Click Create your own application.

   
4. Provide a name for your app (e.g., Radiant Security), select Integrate any other application you don't find in the gallery (Non-gallery), and click Create.

   
5. In the Overview page, select Set up single sign on.

   
6. Select SAML.

   
7. Click Edit.

   
8. Copy the Reply URL and Identifier values from Radiant’s SSO setup and paste these values into Azure's Basic SAML Configuration.

   

Assign users or groups

After creating the enterprise application, you should proceed to assign individual users or groups so that they can authenticate using SAML.

1. Select Users and groups from the left menu.

   
2. Click Add user/group.

   
3. Click None Selected.

   
4. Search for the user or group you wish to add and click Select.

   
5. Click Assign.

   

Submit metadata to Radiant

To complete the implementation of SAML SSO, you need to provide Radiant with your identity provider’s details.

1. Click on the Single sign-on from the left menu.

2. Locate App Federation Metadata Url under SAML Signing Certificates.

3. Select Copy to copy the link, then paste it into Radiant.