Skip to main content
Dec 26, 2023 5:40 PM UTC
Solved

Setup Lucid SSO with multiple Azure Tenant SAML

Hi guys, is it possible to have Lucid SSO setup with multiple IDP, let say two different Azure/Entra tenants? and how to make it happen. Thank you!

Adam Y
Adam YAnswer
Lucid support team
Dec 26, 2023 5:50 PM UTC

Hi, thanks for posting in the Lucid Community! It is possible to configure SAML with multiple IDPs. You have the ability to upload multiple sets of SAML metadata to the Lucid Admin Panel, which will then present users with an option to select which SAML provider they’d like to authenticate with when attempting to sign in to Lucid. 

Comments

Adam Y
Adam YAnswer
Lucid support team
Dec 26, 2023 5:50 PM UTC

Hi, thanks for posting in the Lucid Community! It is possible to configure SAML with multiple IDPs. You have the ability to upload multiple sets of SAML metadata to the Lucid Admin Panel, which will then present users with an option to select which SAML provider they’d like to authenticate with when attempting to sign in to Lucid. 

Translate
bhalimAuthor
Dec 26, 2023 5:59 PM UTC

Thanks, so when I’m in the SAML sign-in activation page, for the domain, can I use multiple domains, or just a single domain and then add the other SAML metadata from the other domain/M365 tenant?

Translate
Adam Y
Lucid support team
Dec 26, 2023 6:17 PM UTC

You can only specify a single domain, which should be the same value you’re using on the IDP side. You can add metadata using the “+ Identity Provider” button on the SAML configuration page. 

Translate
bhalimAuthor
Dec 26, 2023 6:22 PM UTC

Thank you! 


And what’s SCIM again and is it necessary ? What does it stand for?

https://help.lucid.co/hc/en-us/articles/360049432052-Enable-Azure-SAML-and-SCIM-in-Lucid

Translate
Adam Y
Lucid support team
Dec 26, 2023 6:24 PM UTC

SCIM is not required but we do support it. I’ve linked our documentation on SCIM here. 

Translate
bhalimAuthor
Dec 26, 2023 7:37 PM UTC

Hi @Adam Y turned out we also have two different account/org with Lucid, can two different account/org authenticate to a single Azure/Entra SSO? 

Translate
Adam Y
Lucid support team
Dec 27, 2023 3:04 PM UTC

In this case you would need to create a distinct SAML app with unique metadata for each Lucid account. 

Translate