Federated single sign-on

Note: This functionality is automatically available depending on your package. If you can't see the Single sign-on tab in Manage users when you select the settings icon , this means you do not have access to single sign-on (SSO). If you believe you should have access, contact your Client Success Manager (CSM).

Learn about federated single-sign on

Use the links in the following table to go to the area you want more information about.

Article	Description
Set up SSO	Add an SSO app to your identity provider (IdP) and create an SSO configuration.
Step 1: Add configuration details	Name your configuration and select your IdP.
Step 2: Assign base permissions	Assign permissions to users for your Bazaarvoice products.
Step 3: Copy identity provider settings	Add details from your IdP to the Bazaarvoice Portal.
Step 4: Copy SAML protocol settings	Copy SAML protocol details from the Bazaarvoice Portal and add them to your IdP account.
Step 5: Add and verify email domains	Add the email domains you want to allow to access your SSO configuration.
Manage users, permissions, and SSO configuration	Edit or disable your SSO configuration and understand what actions you can take in Manage Users in Portal.
FSSO FAQs	Find answers to frequently asked questions about SSO in Portal.

What is single sign-on (SSO)?

Single sign-on is an authentication feature which allows users to sign in with a single username and password to multiple Bazaarvoice platforms or applications.

Why switch to single sign-on?

Enhanced security—SSO provides two-factor authentication through your corporate identity provider (IdP)
Reduced administration costs—It saves time as setup only needs to be completed once to access multiple Bazaarvoice platforms
Improved user experience—A single username and password is used to connect to all areas of your Bazaarvoice package

When new users sign in to the Bazaarvoice Portal using SSO, user accounts are created automatically using your corporate identity provider base settings. Learn more about this in Step 2 of the setup guide.

Note: Bazaarvoice SSO does not offer the ability to provide attribute BV permissions to users' active directory groups.

What happens once you've set up SSO?

You'll no longer need to manually set up user accounts in Portal. New user accounts are automatically created for users from your organization who sign in to Portal for the first time using SSO.

Caution: If the IdP values are not entered correctly in Step 3 of setup, this prevents Just-in-Time (JIT) Provisioning and means you will need to create new users manually.

User profiles will be populated with information from your corporate IdP account.
Your Bazaarvoice account will be linked to your corporate IdP so that you can update a user’s credentials (name or password) through your corporate IdP account. You will only need to manage one set of credentials.

Five-step wizard

To complete the five-step wizard, follow the instructions in this video or select the links in the table at the start of this article. You can select Save and exit at any time if you need to exit the wizard and return later.

If you require a descriptive transcript for this video, it's available in our video platform External link .