How to set-up the SSO

For security reasons, your company may choose to use single sign-on (SSO). This is a unique authentication system that enables you to connect to several platforms using the same email address and password.

AB Tasty lets you implement SSO through SAML 2.0, an open-standard data format for exchanging authentication and authorization information. AB Tasty’s SSO feature allows you to secure your workspace and control your users’ access. All your team members can log in to AB Tasty using one set of sign-in credentials from existing authentication providers. SSO is an email-level feature that will apply across all projects and experiments.

When you use SSO, our platform automatically links AB Tasty to your professional portal.

Before you begin

• You must have Super Admin or Admin rights to access SSO settings.

• Make sure your Identity Providers can communicate with AB Tasty – some Identity Providers are limited to internal communication, which blocks the use of SSO with AB Tasty

• AB Tasty only manages SP-initiated SSO, so please ensure your Identity Provider is compatible

Set-up your SSO

1

Access the SSO configuration page

1. In the upper right corner of AB Tasty, go to Settings.

2. Select Organization.

3. Click Single Sign-On.

2

Configure your SSO

1. Click Configure SSO.

2. Review the automatically generated ACS URL and Entity ID.

3. In a separate window, log in your identity provider platform and generate your Identity Provider (IdP) metadata file (XML format).

   • If your provider is Okta, please read our article dedicated to Okta SAML integration

   • If your provider is Microsoft, please read our article dedicated to Microsoft Entra ID SAML integration

4. Upload your IdP metadata XML file in AB Tasty SSO configuration module.

To ensure your XML is valid, you can use online tools such as https://www.samltool.com/validate_xml.php

1. Click Save.

3

Manage email domains

1. In the SSO configuration page, go to Email Domains section.

2. Click Add Domain and enter the domain (e.g., company.com).

3. To remove a domain, click the trash icon next to the domain.

You cannot remove the last domain if SSO is active.

4

Activate your SSO

1. On the Activation section, toggle on the SSO.

2. Choose the authorized login method for your organization.

Once SSO only login is enabled on your account, the ability to log in with an email password will be disabled, meaning that you can no longer log in to your AB Tasty account by manually entering your password.

Your SSO provider is added and pending activation.

Activate or deactivate SSO

• In the SSO configuration page, in the Activation section, toggle the Enable SSO for your organization switch.

Troubleshooting

• If you encounter errors during setup, verify your IdP metadata file.

• Ensure all allowed domains are correct and match your users’ email addresses.

• For further help, contact your internal IT team.

• For more information on our SSO system, please read our dedicated FAQ