How To Configure SAML Single-Sign-On In Your RoomAlert.com Account

Step 1: Initiate the SAML Login Configuration in Room Alert Account.

1. Log in to your account at RoomAlert.com.
   • In order to configure SAML settings, you must log in as an administrator or provisioner.
2. In the navigation bar to the left, select your organization name (or account name).
3. Then select Manage Account.
   
4. In the Manage Account page, select SAML Login.
   
5. Then select Configure…
   
6. The SAML Login Configuration form will load.
   
7. Keep this form open as you go through the next steps.

Step 2: Begin configuring setting on your IdP’s side.

1. In a separate browser tab, go to your IdP’s settings.
2. Create a new application for Room Alert Account within your IdP.
3. Once the application is created, you can copy & paste each of the URLs from RoomAlert.com into your IdP:

4. Alternatively, you may use the metadata XML to automatically import these settings, rather than manually copying & pasting them.

Metadata XML URL

https://account.roomalert.com/auth/saml/meta/example

Step 3: Configure the attributes to be passed to Room Alert Account upon login.

Create assertions in your IdP for each of the required attributes.

1. First, define or specify a unique identifier for each user (aka NameID).
   • This can be any identifier that is unique to the user within the context of this service. Ideally, this should be a field that doesn’t change.
   • If your identity provider provides the option, set the NameID Format to “persistent.”
2. Next, configure the following attributes for each user:

First Name attribute

account.roomalert.com.givenname

Last Name attribute

account.roomalert.com.surname

Email attribute

account.roomalert.com.emailaddress

3. Assign each user to your IdP’s new Room Alert Account application.

Step 4: Finish configuring settings in Room Alert Account.

1. Return to the RoomAlert.com browser tab.
2. Select the Edit button at the bottom of the form.
   
3. Then enter the following settings:
   • In Identity Provider Entity ID, copy & paste the identifier from your IdP.
   • In Identity Provider Login URL, copy & paste the URL from your IdP.
   • In Identity Provider Certificate, copy & paste the certificate from your IdP.
     • To do this, first download the certificate (in PEM Base64 format) from your IdP. Open it in a text editor program, such as Notepad, and copy the certificate from there.
4. Once you’ve entered your information into the form, select Save Changes.
   

5. Then use the Test button to check that the SAML configuration works as expected.
   
6. If the test is successful, you’ll see a confirmation message.
   
7. Confirm that the message contains the correct information for the user you’re currently logged in as. Then select Continue to return to the SAML Login Configuration form.
8. You can now enable SAML SSO on the account.

Please follow these instructions to enable SAML SSO for your organization’s Room Alert Account:

Before you begin, you must have successfully tested your SAML configuration. For instructions, please see the How To Configure SAML Login tab.

1. Select Enable the bottom of the SAML Login Configuration form.
2. Then in the confirmation box, select Enable SAML.
   
   Selecting this button will do the following:
   • Log out any users currently signed into the account.
   • Delete the passwords of any users on the account. While SAML is enabled, all users must log in via SAML SSO.
3. You might see a message like this:
   
   • Users assigned to a SAML-enabled RoomAlert.com account cannot be assigned to multiple accounts. Before you can enable SAML, you must either remove these users from your account, or ask them to remove themselves from their other account(s).
   • After these users are removed, return to the form to enable SAML.
4. Once SAML is enabled, you may add new users to your Room Alert Account through your identity provider’s user management system.

In order to edit, test, or delete your SAML configuration, you must first disable SAML on the account. To do this, please follow these steps:

1. First select the Disable button.
   
2. In the confirmation box, please read the message about user passwords, and then select Disable SAML.

3. Once SAML has been disabled, the Edit, Test and Delete buttons become available.
   
   • If you edit your SAML configuration, you’ll need to perform a successful test again before you can re-enable SAML.
   • If you delete your SAML configuration, you’ll see a confirmation dialog box. Select Confirm to complete the process.

SAML Single-Sign-On is an Enterprise+ level feature at RoomAlert.com. If your organization’s account has SAML SSO enabled, and the account’s upgrade expires or is downgraded, SAML SSO will automatically get disabled.

This means that all users on the account will get set back to password authentication. Because their passwords were deleted at the time of enabling SAML, these users will now need to create new passwords with Room Alert Account’s Forgot Password? feature.

Even though SAML is disabled, the configuration is still saved in your account.

• If you choose to upgrade your account again, you may re-enable SAML SSO without having to re-enter your settings.
• If you do not wish to upgrade your account, you may contact AVTECH Tech Support to delete the SAML settings if desired.