Topic

How to upload a new metadata file into the Single Sign-On (SSO) settings at the Account level for the Everbridge Member Portal.

Description

After acquiring a new certificate or if the Identity Provider (IdP) system settings have changed, follow the steps listed below.

Prepare Your Organization

Before making changes, communicate to contacts that SSO is scheduled for reconfiguration.

Backup The Existing Configuration: 

1. Log in to the Manager Portal as an Account Administrator.
2. Select Settings from the top menu bar.
3. Select Security from the menu on the left.
4. Select Single Sign-On for Member Portal from the sub-menu.
5. Screenshot or copy/paste the existing configuration information into Notepad.
6. Click Download at the bottom of the page to the right of each Member Portal configuration to download the existing metadata files.

Updating Only the Identity Provider Metadata File

1. Log in to the Manager Portal as an Account Administrator.
2. Select Settings from the top menu bar.
3. Select Security from the menu on the left.
4. Select Single Sign-On for Member Portal from the sub-menu.
5. Select the Edit Pencil to the right of the name of the current Metadata File.
6. From your files, choose the name of the new metadata file.
7. Select Open.
8. Click Save.
9. Procced to Testing the SSO configuration.

Reconfigure Member Portal SSO Settings

1. Log in to the Manager Portal as an Account Administrator.
2. Select Settings from the top menu bar.
3. Select Security from the menu on the left.
4. Select Single Sign-On for Member Portal from the sub-menu.
5. Click the white Remove button to clear the existing configuration. 

6. Using the backup you created, re-enter the Name for your SSO instance.
7. Using the backup you created, re-enter your API Name. The API name must exactly match what you chose for the Entity ID and Reply URLs.  
8. Upload the Identity Provider Metadata file by clicking Choose File.
9. Select the appropriate radio button for the Security Hash Algorithm.
10. Select the appropriate radio button for the SAML Identity Location.
11. Select the appropriate radio button for the Service Provider initiated Request Binding.
12. Select the appropriate radio button for the Single Logout Redirector.
13. Click Save.

14. Check the box for Member Portal to allow SSO access via the Member Portal.
15. Optional: Check the box for Mobile App to allow SSO access via the Everbridge Mobile App. Using the backup you created, populate the Mobile App Key Phrase.
16. Click Save a second time to instigate the option to Download the metadata file/s from Everbridge. Once the Download box appears to the right of the Organization Name, reconfiguration is completed.

Test the New SSO Configuration

Request a few contacts to attempt logging in via SSO. If the contacts are unable to log in:

1. Capture screenshots and specific error messages.
2. Restore the prior configuration by uploading the metadata and re-entering the settings captured during the 'Backup Existing Configuration' step.
3. Reach out to the IdP administrator to determine whether there is an error happening on the IdP side.
4. Contact Everbridge Support noting the specific error received, the impacted user, the username entered upon log in, and the date/time of the failed sign-in attempt.

Download XML for Record Keeping

If the reconfiguration was successful, download the XML file used to create this new SSO configuration for record keeping and follow the steps below:

1. Log in to the Manager Portal as an Account Administrator.
2. Select Settings from the top menu bar.
3. Select Security from the menu on the left.
4. Select Single Sign-On for Member Portal from the sub-menu.
5. Click the Download button at the bottom of the configuration page.

Related Articles

EBS: Single Sign-on (SSO) ​​​​​​​Unauthorized Access Error When Logging in to the Everbridge Manager or Member Portals

EBS: Troubleshooting & Configuration Guide for Single Sign-On (SSO) - Main Page

EBS: Troubleshooting Single Sign-On (SSO) in Everbridge Suite