Enabling Single Sign-On with SAML

Orchid Fusion VMS now supports Single Sign-On with SAML. SAML is an open standard that allows Orchid Fusion VMS customers to use a third-party identity provider (such as Ping, Auth0, Microsoft Entra ID, or Google Workspace) to manage the users and permissions for logging into Orchid Fusion VMS. By performing some configuration work on the front end, your Orchid Fusion VMS users will be able to sign in with their third-party credentials.

*If you are using Orchid Hybrid VMS, remember that it is a managed system. You will need to submit a ticket with IPConfigure Support for assistance in configuring SAML.

Configuration Overview

To configure Orchid Fusion VMS to work with SAML authentication, you will generally follow this sequence:

• Modify your Orchid Fusion VMS properties file to include the required SAML settings.
• Use your SAML Identity Provider’s web interface to establish Orchid Fusion VMS as a web application.
• Restart the Orchid Fusion VMS service.
• Associate Fusion Permission Groups with the SAML groups that now have login access to Orchid Fusion VMS.
  

Please refer to the next several sections for expanded details on configuring the system for SAML.