Topic

How to enable signature validation for an added layer of Single Sign-On (SSO) security to your Everbridge Account.

Description

This feature allows customers to explicitly choose the most secure Manager Portal SSO configuration to prevent SAML spoofing. By signing the SAML response with a private certificate, our system can assert that non-repudiation exists between the client IDP and the Everbridge authentication service.

Prerequisites

• Ensure your IDP is configured for a Signed SAML (Response/Assertion/Both).
• If a configuration change is required, download a new metadata file.

Configuration

1. Log in to the Everbridge Manager Portal as an Account Administrator
2. Select Settings > Security > Single Sign-On for Manager Portal
3. Toggle the check box next to 'Enable Signature Validation'
4. If needed, upload a new metadata file under Identity Provider Metadata.
5. Click Save.