Single Sign-on of SAML 2.0 (Microsoft Azure)

LoanBeam supports SSO via SAML 2.0 (Microsoft Azure)

SSO Connectivity to LoanBeam

LoanBeam provides SSO connectivity to its clients through IDP initiated authentication.

Client user initiates SSO through an IDP initiated URL to gain access to LoanBeam. The IDP generates a SAML request which will contain various attributes like user email, user first name and user last name. The SAML request is posted to the LoanBeam assertion URL where it gets authenticated and parsed based on client X.509 certificate and SAML attributes. Valid users (based on Email ID attribute) are allowed access to the Loanbeam system

Technical Specifications

On-boarding Steps

Following steps are performed to on-board an account with SSO integration

1. Create an account in Stage and activate it using the seed user.
2. Provide Loanbeam with
   1. Filled out SSO form.
   2. X.509 certificate for authenticating SAML information.
3. Loanbeam team converts the account to SSO.
4. Test Stage account for connectivity.
5. Create Production account and repeat steps (1 – 4)