SAML/SCIM Integration
SAML Overview
Security Assertion Markup Language (SAML) is a standard for exchanging authentication and authorization data between an identity provider (IdP) and a service provider. seoClarity acts as the service provider in this setup.
Supported identity providers: Google, Microsoft, Okta
SAML Does Not Add Users: SSO validates users against your organization's identity provider but does not automatically add them to the seoClarity platform. Users must be added to the platform separately before they can log in. seoClarity admins can manage this in the platform.
Additional Notes:
- Password resets must be handled on the admin side when SAML is configured - seoClarity cannot reset passwords for SSO-enabled accounts
- seoClarity is not currently part of the InCommon Federation for metadata exchange
- Support for signed and encrypted SAML assertions varies by identity provider
Requirements
- Your IdP must support SAML 2.0
- You will need admin access to your IdP to create a SAML application
- Only the email address attribute is required - no additional attributes are needed
seoClarity Configuration Values
Use these values when setting up the SAML application in your IdP:
| Field | Value |
|---|---|
| Entity ID | SeoclaritySAML (same across all environments) |
| Email Domain(s) | The domain(s) of the email addresses to enable SAML for |
| ACS URL (Production) | https://app.seoclarity.net/saml/sso |
| ACS URL (Development) | https://qa.seoclarity.net/saml/sso |
Additional regional environments (optional):
| Region | ACS URL |
|---|---|
| EU | https://eu.seoclarity.net/saml/sso |
| Asia | https://asia.seoclarity.net/saml/sso |
General Setup Process
For most IdP configurations, you only need to create an application using the Entity ID and ACS URL above, leaving other fields as default.
Step 1 - Create the SAML application in your IdP Set up a new application using the configuration values above. If you want to keep email addresses anonymous, you can use your ObjectID instead.
Step 2 - Send your IdP configuration to seoClarity
After setup, send one of the following to support@seoclarity.net:
- Option A (preferred): Download and send your IdP
metadata.xmlfile - Option B (if metadata.xml is unavailable): Provide the following manually:
- SSO URL
- Entity ID
- Certificate of your IdP server
Updating an Existing Certificate: If you need to update an existing SSO certificate with seoClarity, send the new certificate to support@seoclarity.net.
Okta Setup
Okta Documentation: For the most current screenshots and Okta-specific guidance, refer to Okta's official documentation: How to Configure a Custom SAML App
- Sign in to your Okta organization as an admin
- Go to Applications and click Create App Integration
- Select SAML 2.0 and click Next
- In General Settings, enter
seoClarity SAMLas the app name and click Next - In Configure SAML, enter the Single Sign On URL and Audience URI (SP Entity ID) provided above
- Click Show Advanced Settings to reveal additional configuration fields if needed
- Click Next
- In the Feedback section, select "This is an internal application that we created" and click Finish
- Copy the Identity Provider metadata - either the metadata link or download the file
- Send this to support@seoclarity.net to complete the integration
- Navigate to the People section of the application and click Assign Application
- Search for the users you want to assign, select them, and click Next
- Click Confirm Assignments to keep default attributes
SCIM Integration
SCIM (System for Cross-domain Identity Management) automates user provisioning and de-provisioning across applications. With SCIM enabled, you can create, update, and disable seoClarity user accounts without logging into the platform directly - all via API calls from your IdP.
SCIM is Available on Request To enable SCIM for your domain, contact support@seoclarity.net.
For API-based user management, see also: https://kb.seoclarity.net/portal/en/kb/articles/api-documentation
Related Articles
Wordpress Integration
Wordpress Integration The default integration in our settings allows for Wordpress and allows web pages in Wordpress to be created or updated via Content Fusion. Once the Wordpress Integration has been set up, you will be able to use it. Best ...Adobe Analytics Integration
Overview For Adobe Analytics integration, this article outlines the steps needed to run through in order to grant seoClarity access to your account. Adobe eVars (Conversion Variables) are not needed for the Partner Exchange integration. In the Adobe ...Google Search Console Integration
Google Search Console Integration Overview The objective of this integration is to authenticate a Google Search Console account within seoClarity. This integration takes the place of the previous Google Webmaster Tools integration. Background & ...I'm Getting Google Search Console Integration Profile Warning Messages, What Do I Do?
If you're seeing warning messages related to Google Search Console (GSC) profile integration, here's how to address them: Select the Right Profiles: Make sure to select the necessary profiles during integration. If the "+Add Profiles to track" option ...Ahrefs Integration
Overview The Ahrefs integration allows for Ahrefs data to be pulled into Research Grid's Backlinks in a streamlined fashion via the Ahrefs API. Once setup, the data is retrieved in bulk based on the API Subscription level (see table below for link ...