Set Up Censys for SAML Authentication
SAML for single sign-on (SSO) allows Pro and Enterprise customers to use an identity provider (IdP) to handle authentication of team users.
This guide will walk through the process to configure Censys for SAML authentication, which is one part of a two-part process to configure SAML-based authentication for people on your Censys team.
Configure Censys for SAML
Navigate to the authentication configuration page.
Open the user dropdown menu in the top-right and select My Account. On the account page, click on the Team tab and select Authentication from the menu.
Select the Use SAML checkbox. Additional fields will appear.
For the Domains field, enter a comma-separated list of email domains matching team member’s email addresses. Everyone who attempts to log in with an email domain listed here will be directed to your identity provider to authenticate.
Select your Identity Provider from the dropdown. If your provider is not present in the list, select "Other." Examples include Duo, Okta.
Fill in the remaining fields based on information from your identity provider.
If your identity provider provides one, paste the Metadata URL and click the button to automatically populate the remaining fields.
Leave the Sign Authentication Requests checkbox selected and click Save.
With Censys now configured to use your IdP to authenticate your team’s users, configure your Identity Provider if you have not already.
Note: The SP Details section contains information necessary to configure your IdP to allow authentication requests from Censys.