Authenticating Users to Caspio Apps in Multiple Accounts Using a Single Directory

If you want the users stored in your directory to have access to Caspio apps in multiple accounts, configure the connection using your directory’s app connections and SAML SSO authentication method in Authentication. This kind of setup is useful for your organization if you work with multiple Caspio accounts. You do not need to store your users in each account anymore, just keep them in one account in a directory. Provide access to any app in any account by creating app connections with the directory. The user identifier used in the directory should be the same as the user identifier in the data source table of the authentication object you use to protect your app.  

Prerequisites:  

Make sure that you have: 

• A Caspio account with application protected by authentication object (below called an “apps account”) 
• Caspio account with your directory (below called a “directory account”). 

Steps: 

1. Open the apps account. 
2. Open an authentication object or create it.
3. Change Setup options to Custom. 
4. Change authentication method to SAML SSO. 
5. Select SAML login field. 
   For test purposes, use the field which stores user email addresses. If you want to use a different field, make sure it matches the identifier selected in step 8 in directory account.

Note: If you do not want to share any user personal data with the apps account, a non-personalized identifier may be useful. Make sure that the same identifier is stored in the directory (directory account) and a data source table of the authentication object in the apps account. 

6. In a new tab, open your directory in the directory account.
7. In the App Connections tab, click Create app connection.
8. Use the default Email field as user identifier or create a new unique, text (255) field in directory table to use it as a custom identifier.
9. Copy the integration URLs from the authentication object in the apps account to the directory in directory account: 

10. Click Create and enable.
11. Copy the links from the Identity provider settings section of the app connection, and paste them into the Settings section of authentication. 

12. In directory in Directory account, in the SAML signing certificate section, download the certificate and upload it in the X.509 Certificate field of the authentication in the apps account.
13. Save the authentication in the apps account.