Clari SSO Configuration Instructions

Overview

Clari has updated its user authentication infrastructure to be more robust and secure. This includes updates to our single sign-on (SSO) that you use to connect your Identity Provider (e.g., Okta, Google, DUO, Azure) to Clari. 

This update allows Clari to keep our single sign-on infrastructure up to date with industry best practices and provide better user management features in the future, like SCIM provisioning.

Next Steps

Please forward this article to the appropriate team, like your IT or security team, who can assist with updating the configuration of your SSO Identity Provider (IDP).

Instructions

1. Configure SAML Application with the Service Provider Information below

2. Forward the metadata over to your Professional Services Team Member or open a ticket in the Support Portal. The following is required to configure SSO. The Metadata can be provided directly or via a metadata URL.

1. IdP Issuer URI: The issuer URI of the Identity Provider. This value is usually the SAML Metadata entityID of the Identity Provider EntityDescriptor.

2. IdP Single Sign-On URL: The binding specific Identity Provider Authentication Request Protocol endpoint that receives SAML AuthN Request messages from Okta.

3. IDP Signature Certificate: The Identity Provider's PEM or DER-encoded public key certificate is used to verify SAML message and assertion signatures.

4. Clari will configure accordingly. 

5. Clari will reach out to test on a user account before enabling SSO for the entire instance.

Clari Service Provider Information

• Audience URL: Will be provided by your Clari Team

• ACS URL: https://login.clari.com/sso/saml2

Need Help?

If you need assistance, open a support case with Clari through our Support Portal.