Shareworks supports SSO through the SAML v2.0 standard authored by the OASIS committee. This protocol allows for a secured single sign on to Shareworks without transmitting any actual authentication credentials from a client’s site.

In a typical implementation the client will provide a link to Shareworks on their intranet or SSO portal site. When this link is clicked the browser contacts the clients SAML server that generates a Base64 encoded version of a SAML samlp:Response document. The browser then posts this document to Shareworks. Shareworks will then either authenticate the user and direct the browser to Shareworks or provide them with an error message.

Currently Shareworks only supports Identity Provider Initiated (IdP-Init) SSO.

Download the full document