SAML/SCIM Integration

SAML Overview

Security Assertion Markup Language (SAML) is a standard for exchanging authentication and authorization data between an identity provider (IdP) and a service provider. seoClarity acts as the service provider in this setup.

Supported identity providers: Google, Microsoft, Okta

SAML Does Not Add Users: SSO validates users against your organization's identity provider but does not automatically add them to the seoClarity platform. Users must be added to the platform separately before they can log in. seoClarity admins can manage this in the platform.

Additional Notes:
Password resets must be handled on the admin side when SAML is configured - seoClarity cannot reset passwords for SSO-enabled accounts
seoClarity is not currently part of the InCommon Federation for metadata exchange
Support for signed and encrypted SAML assertions varies by identity provider

Requirements

Your IdP must support SAML 2.0
You will need admin access to your IdP to create a SAML application
Only the email address attribute is required - no additional attributes are needed

seoClarity Configuration Values

Use these values when setting up the SAML application in your IdP:

Field	Value
Entity ID	`SeoclaritySAML` (same across all environments)
Email Domain(s)	The domain(s) of the email addresses to enable SAML for
ACS URL (Production)	`https://app.seoclarity.net/saml/sso`
ACS URL (Development)	`https://qa.seoclarity.net/saml/sso`

Additional regional environments (optional):

Region	ACS URL
EU	`https://eu.seoclarity.net/saml/sso`
Asia	`https://asia.seoclarity.net/saml/sso`

General Setup Process

For most IdP configurations, you only need to create an application using the Entity ID and ACS URL above, leaving other fields as default.

Step 1 - Create the SAML application in your IdP Set up a new application using the configuration values above. If you want to keep email addresses anonymous, you can use your ObjectID instead.

Step 2 - Send your IdP configuration to seoClarity

After setup, send one of the following to support@seoclarity.net:

Option A (preferred): Download and send your IdP metadata.xml file
Option B (if metadata.xml is unavailable): Provide the following manually:
- SSO URL
- Entity ID
- Certificate of your IdP server

Updating an Existing Certificate: If you need to update an existing SSO certificate with seoClarity, send the new certificate to support@seoclarity.net.

Okta Setup

Okta Documentation: For the most current screenshots and Okta-specific guidance, refer to Okta's official documentation: How to Configure a Custom SAML App

Sign in to your Okta organization as an admin
Go to Applications and click Create App Integration
Select SAML 2.0 and click Next
In General Settings, enter seoClarity SAML as the app name and click Next
In Configure SAML, enter the Single Sign On URL and Audience URI (SP Entity ID) provided above
- Click Show Advanced Settings to reveal additional configuration fields if needed
Click Next
In the Feedback section, select "This is an internal application that we created" and click Finish
Copy the Identity Provider metadata - either the metadata link or download the file
- Send this to support@seoclarity.net to complete the integration
Navigate to the People section of the application and click Assign Application
Search for the users you want to assign, select them, and click Next
Click Confirm Assignments to keep default attributes

SCIM Integration

SCIM (System for Cross-domain Identity Management) automates user provisioning and de-provisioning across applications. With SCIM enabled, you can create, update, and disable seoClarity user accounts without logging into the platform directly - all via API calls from your IdP.

SCIM is Available on Request To enable SCIM for your domain, contact support@seoclarity.net.

For API-based user management, see also: https://kb.seoclarity.net/portal/en/kb/articles/api-documentation