SSO Documentation

Using our Single Sign-On (SSO), you will be able to access your Symbient AI account through your company’s authentication system without having to use a Symbient AI login. Only Enterprise memberships can be configured to use SSO. To enable this for your business, please contact Symbient AI support.

User Instructions

First Time User Instructions

1. Please contact your company administrator to ensure that your account has been created within your company's Identity and Access Management and has access to Symbient AI applications.
2. Navigate to the provided authentication URL:
   • This URL will be provided by your administrator, be sure to save this for quick reference.
3. Authenticate using your company's IAM:
   • If not already authenticated, you will be redirected to the login page for your company’s Identity and Access Management (IAM).
4. Wait for account creation and role assignment by an administrator:
   • Upon your first login, a new user account will be created for you in Symbient AI.
   • Initially, you will not have any permissions assigned and will not be able to access most of Symbient AI's features.
   • Please notify your company administrator that you have created your account, they will assign the roles necessary to access features.
5. Access Symbient AI with the assigned roles:
   • After roles are assigned, log into Symbient AI using the same authentication URL.
   • You will now have access to features and information based on your assigned roles.

Company Administrator Instructions

A Single Sign-On URL will be provided by Symbient AI Support. If you need to recover this URL, please contact Symbient AI support. This URL will be used by your organization's users. If the user is not currently authenticated through your company’s Identity and Access Management (IAM), it will redirect them to the IAM login.

Symbient AI currently supports SSO for the following configurations:

• SAML with Entra ID

Adding A User

1. Users must first be created within your company’s Identity and Access Management prior to logging in to the SSO URL.
2. Refer new users to the User Instructions section above for steps on what to do after logging in.
3. When a user authenticates via SSO for the first time, Symbient AI will automatically create an account for them if their account is approved for access to Symbient AI.
4. Newly created accounts will have no user permissions assigned by default. It is the company admin's responsibility to log into Symbient AI and assign the necessary roles and permissions for new users.

Maintaining Users

To edit existing user permissions within Symbient AI do the following:

1. Click on the Users icon on the left-hand Menu Bar.
2. Click on the Name of the user to edit.
3. This will open the User Details tab.
4. The following fields are required for the edits to be saved:
   • Email Address (already filled in from SSO details)
   • First Name
   • Last Name
   • User Roles
5. When managing users in the Symbient AI platform, please note the following fields will be hidden if SSO is active:
   • "User is active?"
   • "User uses 2FA?"
   • Both Password fields
6. Click Save when finished.
7. After being prompted that the current user settings have been updated, click Dismiss to return to Users.

Deleting Users

Removing a user from your group will delete that user’s information as well as any settings for that user. No group data will be affected. Please note that removing a user from your Symbient AI group will not prevent that user from logging into Symbient AI via SSO. If they still have authentication through the company Identity and Access Management (IAM), then a new account will automatically be created when they log in. To prevent access to Symbient AI, please remove their authentication within the IAM.

1. Click on the Users icon on the left-hand Menu Bar.
2. Select the users to remove by checking the checkbox to the left of the user’s name.
3. Click the Delete button in the top left corner of the window.
4. Click Yes when prompted to confirm.
5. To cancel the deletion, Click No.