Ambassify allows its enterprise customers to connect their existing authentication services to those of Ambassify using a few authentication protocols like SAML, WS-Federation and OAuth. This means that these customers' advocates will be able to log in to Ambassify's platform with their existing login credentials.

Single sign-on

With single sign-on (SSO), users can sign in using their corporate credentials to access multiple systems and service providers, including Ambassify.

For example, a company that's using Google's "G Suite" could let their employees log in to Ambassify using the e-mail and password they normally use to access their company e-mail account.

Another common use case is a company where all user authentications are managed by a corporate authentication system such as ADFS or Azure AD (generically referred to as an identity provider or IdP).

Ambassify establishes a trust relationship with the IdP and allows it to authenticate and log in users to Ambassify.

Other examples could be that the customer has a webshop or forum where their users can already log in. For these users, it would make logging in to Ambassify a lot easier if they could simply use their credentials from the webshop or forum. If the webshop or forum supports any of the Single Sign-on protocols supported by Ambassify, this becomes possible.

Skipping community invites

Another huge advantage of using Enterprise SSO authentication is that it can allow a customer to skip sending community invites to all their advocates before they can access the Ambassify platform.

Once the SSO has been set up, the customer can enable "automatic advocate accounts". This will let anyone who can log in using their IdP credentials (so anyone that exists in the customer's database) log in to the Ambassify community without having to receive an invite link first. The customer is in control and can decide which users in their database should receive permission to access Ambassify.

Supported protocols

Next to the SAML protocol, we also support OAuth and WS Federation out of the box. Other protocols will need further investigation first.

SSO authentication is available within the Enterprise plan. If you are using another plan and you are interested in this feature, you can contact your customer success manager.

Did this answer your question?