Single Sign-On (SSO)
      Back to home
      1. Organisation Help Centre
      2. Integrations
      3. Single Sign-On (SSO)

      Set up Shibboleth Single Sign-On (SSO)

      This guide provides all you need to know about configuring and testing your Shibboleth single sign-on (SSO) integration with Perlego.

      Included: Enhanced, Ultimate
      Add-on required: Essentials
      Read more about plans and add-ons.

      Table of contents

      1. Configuration
        1. Share your entity ID
        2. Attribute release
      2. Testing

      Configuration

      Before you start the configuration make sure:

      • Your organisation is on the Enhanced or Ultimate plan OR you have purchased the SSO integration as an add-on. 
      • You have Shibboleth admin rights.
      • You have a Shibboleth account you can test with (this might be the same email address as your admin account).

      Share your entity ID

      You’ll need to tell us your Shibboleth IdP Entity ID. It should look similar to this: https://test-idp.ukfederation.org.uk/idp/shibboleth.

      Send us your Entity ID by completing the Single Sign-On set up form.

      If you need them, Perlego’s Entity ID and metadata details are available from eduGain.

      Attribute release

      We’ll let you know when SSO has been added to your account. The next step will be to release the required attributes.

      You must release the following attributes in the metadata:

      Attribute Documentation Perlego account field
      One of the following:
      -givenName
      -urn:mace:dir:attributedef:givenName
      -urn:oid:2.5.4.42      		 https://wiki.refeds.org/display/STAN/eduPerson+2020-01#eduPerson202001-givenName First name
      One of the following:
      -sn
      -urn:mace:dir:attribute-def:sn
      -urn:oid:2.5.4.4      		 https://wiki.refeds.org/display/STAN/eduPerson+2020-01#eduPerson202001-sn Last name
      One of the following:
      -email
      -urn:mace:dir:attribute-def:mail
      -urn:oid:0.9.2342.19200300.100.1.3      		 https://wiki.refeds.org/display/STAN/eduPerson+2020-01#eduPerson202001-mail Email

      Testing

      Once you have released the attributes you are ready to test your SSO login. You’ll need an access link for your account.

      • Open the access link and accept the terms and conditions.
      • Click Create your account.
      • You’ll be re-directed to your Shibboleth authentication page.
      • Enter the Shibboleth credentials for your test account.
      • Once entered you’ll be logged in to Perlego.

      You can always check the account has been added by visiting the Perlego Organisation Subscription Manager.