How to set up SSO integration with your IdP

Preprequisites

• An account with your SAML IdP, admin access to that account

• Wire team, admin access to that team

• If your team is hosted at wire.com: : - Ask customer support to enable the SSO feature flag for you.

• If you are running your own on-prem instance: : - for handling the feature flag, you can run your own backoffice service.

  • More simply, you can configure the galley service so that sso is always enabled (just put “enabled-by-default” here).

Setting up your IdP

• The SP Metadata URL: https://prod-nginz-https.wire.com/sso/metadata

• The SSO Login URL: https://prod-nginz-https.wire.com/sso/finalize-login

• SP Entity ID (aka Request Issuer ID): https://prod-nginz-https.wire.com/sso/finalize-login

How you need to use this information during setting up your IdP depends on the vendor. Let us know if you run into any trouble!

Setting up your wire team

See https://support.wire.com/hc/en-us/articles/360001285638-Set-up-SSO-internally

Authentication

The team settings will show you a login code from us that looks like eg.

> wire-959b5840-3e8a-11e9-adff-0fa5314b31c0

See https://support.wire.com/hc/en-us/articles/360000954617-Pro-How-to-log-in-with-SSO- on how to use this to login on wire.

Trouble shooting

See FAQ.