Overview
This article provides a step-by-step guide for companies looking to change their existing SAML SSO Identity Provider (IdP) when using PostBeyond. It highlights the importance of coordinating with the Customer Success Manager (CSM), providing necessary information to PostBeyond, and testing the new setup after the platform update to ensure a seamless transition.
Information
Changing the SAML SSO IdP (Identity Provider)
Learn the steps to changing an existing SSO IdP.
If a company already has SAML SSO set-up with PostBeyond and is changing the IdP (Identity Provider), make sure to follow these instructions to ensure a smooth process:
Step 1: Inform CSM
The admin should let the CSM know that this change is going to happen and provide a time when they know that the least amount of users will be logging into the platform or a 'downtime' they've scheduled with ALL of the users.
Step 2: Provide Information
The Admin will provide the following information to PostBeyond:
- Metadata
- Certificate
- The three Attributes: (1) givenname – user first name, (2) surname – user last name, (3) emailaddress – user email address
Note: The SP (Service Provider) metadata that was sent from PostBeyond during the initial SSO set-up will remain the same.
Step 3: Platform Update
During this scheduled downtime, PostBeyond will use the above data to make the changes to the platform. Once this process is completed, PostBeyond will notify the company's Admin and IT team that the switch over was completed.
Step 4: Test Setup
From there, we would suggest testing the SAML SSO set-up to ensure that it is working properly.
Integration Guides
Below are guides to help you integrate various services with PostBeyond.
- OKTA PostBeyond Application Integration
- Custom OKTA Application (SAML SSO with OKTA IdP)
- Setting up SAML SSO (all IdPs but OKTA)
FAQ
What is the first step in changing the SAML SSO IdP with PostBeyond?
The first step is to inform the Customer Success Manager (CSM) about the change and schedule a time for the update when there will be minimal user activity or during a planned downtime.
Will the Service Provider (SP) metadata change during the update process?
No, the SP metadata provided by PostBeyond during the initial SSO setup will remain the same.
What should be done after PostBeyond has updated the platform with the new IdP?
After the platform update, it is suggested to test the SAML SSO setup to ensure that everything is working properly.
Who should be contacted if assistance is required during the IdP change process?
For any questions or further assistance, you should contact PostBeyond support at support@postbeyond.com.