Active Directory Federation Services (ADFS) is a SSO provider that you can use to log in to Planhat.
Those using Windows Server will need to create a Relying Party Trust. To create a Relying Party Trust you need to do the following in your ADFS admin panel.
Click "Add new relying party trust".
Choose "Enter data about relying party manually".
Choose "ADFS profile".
Choose "Enable support for SAML 2.0" and enter: https://api.planhat.com/samlassert/[Company name]
Add https://api.planhat.com/samlmetadata/[Company name] as relying party trust.
Create attribute nameID which will contain user email.
Submit issuer (your_org), entry point (https://[adfs_subdomain],[your_org_domain]/adfs/ls/) and public certificate on this page.
📌 Important to note: create a "User access URL" so your users don't have to login again. If you don't want your users to have to login every day then we recommend you provide a "User Access URL", which is a URL to your AD that will automatically log them into Planhat, this way, if a session expires we can redirect them to this URL and their session will automatically be renewed.