Overview
This article is a guide for how to manually configure SAML-based SSO between Limble and Microsoft ADFS (Active Directory Federation Services). Once SSO is configured, users with SSO enabled will receive a welcome email with login instructions.
If a user has SSO enabled, they will only be able to log in using SSO; except super users who will be able to use the "forget password" prompt to log in normally if needed.
(Note: SSO is only available to Enterprise customers for an additional fee. To upgrade your account or learn more, reach out to our support team.)
Table of Contents
Requirements
A working ADFS server with access to your Active Directory users.
You must be a super admin in ADFS.
Usernames in ADFS should ideally be email addresses, to reduce conflict risk.
Your Limble account must be on the Enterprise plan.
Step 1: Enable ADFS in Limble
Log in to Limble and go to Settings > Manage SSO.
Select Active Directory Federation Services as your SSO Provider and type in your ADFS domain name.
(Note: when typing your ADFS domain name into the SSO Domain field, make sure to not include the https:// portion.)
Step 2: Connect Limble to Your ADFS Account
Open a new tab or window on your browser, and log in to your super admin ADFS account.
Add LimbleCMMS as a new application in your ADFS account.
Next, set the following "Issuance Transform Rules" to the Active Directory attribute store:
E-mail Addresses: "email"
Given-Name: "given_name"
Surname: "family_name"
Set https://us-auth.limblecmms.com/ssoLogin as your redirect URL.
Step 3: Add ClientID and Client Secret in Limble
Copy the ClientID from your ADFS account.
Navigate back to your Limble account and paste your ClientID into the ClientID field on the Manage SSO page.
Do the same with the Client Secret. Copy it from your ADFS account, then navigate back to Limble and paste it into the Client Secret field on the Manage SSO page.
Then, click "Enable SSO."
(Note: if you run into errors anywhere in the process, we recommend checking your error logs, which are available via Event Viewer > Applications and Services Logs > AD FS > Admin.
If you make any configuration changes in your ADFS server, please restart your server.)
Step 4: Configure Users Using Manual Provisioning
Add users to the ADFS LimbleCMMS application.
Usernames in Limble must match their ADFS usernames. If you enable SSO without matching the usernames to each other, the user may be unable to log in to Limble. After their first login, their username can be changed.
In Limble, on the Manage Users page, enable SSO or add users with SSO enabled for each of your users.
Related Articles
Still don’t see what you’re looking for? Check out our YouTube channel for more tips and tricks! You can also reach out to us anytime at support@limblecmms.com.