Enterprise SSO Setup with Auth0

MockFlow provides built-in connectors for Okta, OneLogin, and Google SSO identity providers. In addition to this, Enterprise customers can connect to any third-party SSO identity providers that support SAML methodology, such as Auth0, IBM Cloud identity, Bitium, etc.

Setting up SSO involves Setting up the Identity Provider and then setting up your MockFlow account.

Setting up the Identity Provider - Auth0

1 Login to the provider with administrator access

2 Navigate to Applications -> Create New Application

3 Enter “MockFlow” in the Name field and select “Regular Web Application” as the type.

4 In the settings tab, add the Application URIs section details with the following information

1. Allowed Callback URLs: https://mockflow.com/login/saml/acs.jsp
2. Application Login URI: https://mockflow.com

5 In the Addons tab, enable “SAML2 WEBAPP”.

6 In the popup, open the “Settings” tab and ensure “Allowed Callback URL” is same as the one entered in the previous screen. Paste the following in the “settings” box and click “Save” at the bottom of the popup

{

  "nameIdentifierProbes": [

    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"

  ]

}

7 Open the “Usage” tab and copy the following fields

1. Issuer
2. Identity Provider Login URL
3. Identity Provider Certificate

Account Setup in MockFlow

1Login to MockFlow as the enterprise admin user, Click on the profile icon.

2Under "My Accounts", select the tab "SSO".

3Click the toggle button to enable SSO.

4Select the provider as "Custom Identity Provider":

5Copy the following details mentioned in the read-only fields that is required by the "Identity Provider" to create a connection:

I - Single Sign On URL (Authorization callback URL)

II - Audience URL (Allowed Origin)

III - Name ID Format - The Identity Provider should return the NameId format as an emailAddress.

IV - Few providers require to set "nameIdentifierProbes" which is "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"

V - Attributes required by MockFlow are "firstName" and "lastName"

6Use the above details to create new connection/application for MockFlow in your Identity Provider.

7From the Identity Provider, copy the following fields:

1. Sign-in URL
2. Issuer Id
3. X509 Certificate

8Paste the above data in MockFlow, My Accounts -> SSO tab under the corresponding label.

9Press the "Save" button to save all your entries.

Adding users to MockFlow

1You can add the list of users to allow access into MockFlow in the same "My Accounts" panel.

2Under the tab "User Licenses", enter the email of the users to provide them access.

3You can also revoke the license when required.

After setup: On how to log in with SSO in MockFlow

At  https://mockflow.com, clicking the log in button shows the login dialog with the log in with SSO button as shown below:

4After sign in with SSO.