Single Sign-On (SSO) provides a secure and convenient way for users to access the PubNub Admin Portal using their organization’s identity provider (IdP). PubNub supports SAML-based SSO, allowing seamless authentication and improved security. Follow the steps below to enable SSO for your PubNub account.
SSO is available only to customers with Pro subscription.
Step 1: Configure Your Identity Provider (IdP) for PubNub Admin Portal
To integrate your IdP with PubNub Admin Portal, follow the official guides provided by your IdP. During setup, use the following parameters:
-
Entity ID:
https://admin.pubnub.com/
-
ACS URL:
https://admin.pubnub.com/api/saml/acs?domain=<YOUR DOMAIN>
Additionally, download the XML IdP descriptor, which contains the x.509 certificate. This certificate is required for finalizing the configuration within the PubNub Admin Portal.
Required User Attributes
Ensure your IdP is configured to pass the following user attributes:
-
email - required
-
firstName - required
-
lastName - required
-
companyName - optional
Make sure to assign the necessary users to the newly created application in your IdP.
Note: The IdP configuration must be carried out by your organization’s IT department. If you encounter any issues or have questions regarding the configuration, please contact your identity provider directly.
Step 2: Contact PubNub Support to Enable SSO
Once your IdP is configured, reach out to the PubNub Support Team to request the activation of Single Sign-On for your account. When contacting support, provide the following details:
-
The PubNub account for which SSO should be enabled.
-
The domain to be used for SSO.
-
Optionally, share the x.509 certificate (this can also be uploaded later in the Admin Portal).
The owner of the specified PubNub account will be designated as the domain administrator on PubNub’s side.
Step 3: Complete the SSO Configuration in PubNub Admin Portal
After PubNub Support enables SSO for your domain:
-
Ensure you are logged into your PubNub Admin Portal account.
-
Navigate to the ‘My Account’ menu (located on the right-hand side of the Admin Portal).
-
Locate the Single Sign-On option in the dropdown.
-
If you haven’t provided the x.509 certificate earlier, upload it now to complete the configuration.
-
Save all changes.
Step 4: Logging In with SSO
Once the setup is complete, your users can log in to the PubNub Admin Portal using their IdP accounts:
-
Go to the PubNub Admin Portal login page.
-
Click on the ‘SSO’ button.
-
Authenticate using the credentials managed by your IdP.
Your users will now be seamlessly authenticated through your organization’s IdP.