Info: You must have a Rand Platform Enterprise subscription plan to use SSO, and you will require a custom domain. Please get in touch with your Customer Success Manager/Account Manager or Rand Platform Support to request a custom domain.
If you are not currently on an Enterprise plan, don’t hesitate to get in touch with your Customer Success Manager/Account Manager to discuss your options.
The Rand Platform SSO integration allows you to authenticate supported SAML Identity Providers with Rand Platform. If your users already have a login to a company portal or intranet, SSO might enable them to re-use those credentials to access Rand Platform. Rand Platform supports both IDP initiated and SP initiated authentication as well as user auto-provisioning with key user attributes.
Prerequisites:
Before you begin you will need:
- SAML based identity providers such as Microsoft ADFS, Auth0, Onelogin, Okta
- Administrative permissions to configure the Identity Provider
SSO Endpoint addresses:
Configure your Identity Provider with the following SAML/SSO options (please note you must have a custom Rand Platform domain to configure SSO).
- Rand Platform SSO Metadata file:
https://app.{yourdomain}.randmcnally.io/v1/sso/metadata - Audience (EntityID): https://app.{yourdomain}.randmcnally.io/v1/sso/metadata
- Recipient (Endpoint): https://app.{yourdomain}.randmcnally.io/v1/sso/acs
- Logout URL: https://app.{yourdomain}.randmcnally.io/v1/sso/sls
- Login URL: https://app.{yourdomain}.randmcnally.io/v1/sso/login
SSO attributes required:
| SSO Attribute Name | Value | Required |
| NameID | email address | Y |
| FleetsuRole | driver user supervisor manager sadmin |
N – defaults to User if not present |
| FirstName | User First Name | Y |
| LastName | User Last Name | Y |
| PhoneNumber | User phone number (with +xx if available, otherwise defaults to account country code) | N |
| ProfilePictureUrl | URL of avatar image (must be publicly available without authentication) | N |
Once you have configured your SSO provider, please send the following information back to your Rand Platform support agent or technical representative to finalise the configuration:
- Your Identity Provider metadata.xml file
or
- EntityID
- SSO Service URL
- SSO Logout Service URL
- x509 Certificate
Testing and Validation
Once everything is configured, you can access the following URL to validate if all attributes have been set up successfully.
https://app.{yourdomain}.randmcnally.io/v1/sso/attr