Set up Supplier SSO (Single Sign-On)

Summary

Set up SSO for the Supplier Portal

Let suppliers sign in to the Supplier Portal using single sign-on (SSO) through your identity provider. Once your SSO connection is provisioned, configure it in the PIM to display an SSO option on the Supplier Portal login page.

Before you start

  • Have an SSO connection configured for your Akeneo instance. See more details here.
  • Have the provisioned connection name available.
  • Make sure supplier users have been created in their Supplier Organizations. Administrators manage these accounts from the PIM.

Create supplier accounts before login

SSO does not automatically create Supplier Portal accounts at the first login. Just-in-time provisioning is not supported, so each supplier user must already have an account in a Supplier Organization.

 

Configure the SSO connection

  1. Open /#/supplier-portals/ on your PIM instance.
  2. Click SETTINGS in the top-right corner.
  3. Scroll to SSO CONNECTIONS.
  4. Set Enabled to Yes.
  5. Enter the provisioned connection name in Connection name.
  6. Enter the text for the login option in Button label.
  7. Save the configuration.
Supplier Portal settings showing SSO CONNECTIONS with Enabled set to Yes and Connection name and Button label completed]

Use the connection name provided during SSO setup. This identifies the provisioned connection and is separate from the label you choose for suppliers to see.

Check the supplier login page

Open the Supplier Portal login page. The configured SSO connection appears on the page, allowing suppliers to start signing in through your identity provider.

Supplier Portal login page displaying the configured SSO option
Supplier Portal login page displaying the configured SSO option

Plan how suppliers start signing in

Supplier Portal supports service provider-initiated sign-in only. This means suppliers start from the Supplier Portal rather than launching an identity provider-initiated authentication flow.

If you provide access from an identity provider dashboard, create a bookmark tile that opens the Supplier Portal URL.

Configuring application access

Do not configure the tile to launch an identity provider-initiated SSO flow. Supplier Portal supports service provider-initiated sign-in only.

 

Account for supplier email domains

Email-domain detection requires a domain you own that is configured for only one SSO connection. It cannot route partners or other external users based on domains you do not own.

For suppliers using external email domains, use the configured SSO option on the Supplier Portal login page rather than relying on email-domain detection.

 

Want to find out more? Take a look at these related articles