Single Sign On (SSO)

RemotePhoto integrates with any SSO IDP (Identity Provider) that supports SAML 2.0 protocol. This allows cardholders to log into RemotePhoto using their organization's SSO credentials. Additionally, RemotePhoto supports "just in time provisioning", which creates users in RemotePhoto the first time they log into RemotePhoto via SSO, which eliminates the need to manually provision users that need to submit a photo. SSO integrations are available as an add-on feature to any plan with RemotePhoto. 

SSO Integration Process:

1. Exchange metadata files. We'll need your production metadata .xml file (and your test metadata if you have a test instance you'd like us to use first). If you don't have a test instance, we can connect your production instance to our test environment first before switching over to production. 

RemotePhoto's metadata files can be found here:

• TEST: https://test-auth.onlinephotosubmission.com/saml/metadata
• PROD US (US customers): https://auth.onlinephotosubmission.com/saml/metadata
• PROD CA (Canada customers): https://auth.cloudcard.ca/saml/metadata
• PROD TN (TouchNet Customers): https://auth.onlinephoto.touchnet.com/saml/metadata

2. Determine which attributes will be passed and provide the attribute names to RemotePhoto on your implementation questionnaire.

3. Schedule a call with RemotePhoto's technical support team to test.

Note: If you have any questions regarding configuring SSO that we weren't able to answer on your kickoff call or with the explanation video, please schedule a call with our technical support team. We've always found calls to be faster than emails.