Single Sign-On (SSO) Setup Guide

ABC-Plan supports enterprise Single Sign-On via SAML 2.0, allowing your organization to manage authentication through your existing identity provider. This guide will help your IT team configure SSO integration with ABC-Plan.

On this page:

• Getting Started
• Supported Identity Providers
• Information We Need From You
• Information We Will Provide
• Microsoft Entra ID Setup
• Other Identity Providers
• Testing Your Configuration
• Decommissioning Users
• Contact

Getting Started

Timeline

SSO setup typically takes 1–2 business days once we have all the required information:

Who Should Participate

For a smooth setup, please include the following participants from your organization:

Before the Configuration Call

To make the most of our configuration call, please have the following ready:

1. Admin access to your identity provider during the call
2. Your email domain (e.g., yourcompany.com) — this tells ABC-Plan which users should be redirected to SSO
3. A test user account that can be used to verify the configuration
4. Review the Information We Need From You section below

Supported Identity Providers

ABC-Plan supports any SAML 2.0 compliant identity provider, including:

• Microsoft Entra ID (formerly Azure Active Directory)
• Okta
• OneLogin
• Google Workspace
• Ping Identity
• Other SAML 2.0 providers

Information We Need From You

To configure SSO for your organization, please provide the following information to your ABC-Plan contact:

Information We Will Provide

Once we receive your information, we will configure ABC-Plan and provide you with:

Microsoft Entra ID Setup

If your organization uses Microsoft Entra ID (formerly Azure Active Directory), follow these steps:

Step 1: Create an Enterprise Application

1. Sign in to the Microsoft Entra admin center
2. Navigate to Identity → Applications → Enterprise applications
3. Click New application → Create your own application
4. Name the application "ABC-Plan" and select Integrate any other application you don't find in the gallery (Non-gallery)
5. Click Create

Step 2: Configure SAML Single Sign-On

1. In your new application, go to Single sign-on and select SAML
2. In the Basic SAML Configuration section, click Edit and enter:
   • Identifier (Entity ID): https://abc-plan-prod.firebaseapp.com/
   • Reply URL (ACS URL): We will provide this after initial setup
3. Click Save

Step 3: Collect Configuration Details

From the SAML Certificates section, download the Certificate (Base64).

From the Set up ABC-Plan section, copy:

• Login URL — This is your SSO URL
• Microsoft Entra Identifier — This is your Entity ID

Step 4: Send Us Your Configuration

Email the following to support@abc-plan.com:

• Your organization's email domain (e.g., yourcompany.com)
• Login URL
• Microsoft Entra Identifier
• The downloaded certificate file

Step 5: Complete Configuration

We will configure ABC-Plan and reply with your Callback URL. Update your Entra ID application's Reply URL (ACS URL) with the value we provide.

Other Identity Providers

For other SAML 2.0 identity providers, the general process is:

1. Create a new SAML application in your identity provider
2. Configure the Entity ID / Audience URI as https://abc-plan-prod.firebaseapp.com/
3. Export or copy your provider's:
   • Entity ID / Issuer URL
   • SSO URL / Login URL
   • X.509 Certificate
4. Send these details to support@abc-plan.com
5. We will reply with the Callback URL (ACS URL) to complete your configuration

Testing Your Configuration

Once SSO is configured:

1. Navigate to app.abc-plan.com
2. Enter your corporate email address
3. You should be redirected to your identity provider's login page
4. After successful authentication, you'll be redirected back to ABC-Plan

User Provisioning

After SSO is enabled, users in your organization can access ABC-Plan by:

• Being added to your organization in ABC-Plan by an administrator
• Or being assigned to the ABC-Plan application in your identity provider (if using Just-in-Time provisioning)

Decommissioning Users

When a user leaves your organization or no longer needs access to ABC-Plan, please notify us so we can remove their account.

To decommission a user, email support@abc-plan.com with the user's email address (user ID). We will remove their access promptly.

Contact

Questions about SSO setup? Reach out to us at support@abc-plan.com.

For security-related inquiries, contact Michael Osofsky at michael@abc-plan.com.

See our Security Policy for details on how we protect your data.