Before you start

Single Sign-On is only available on pre-approved, contracted CompanyCam Accounts. Adding this to your plan will result in additional charges.
Setting up Single Sign-On will likely require the assistance of your company’s IT professional.

Helpful Terms

IdP or Identity provider - This refers to the authentication service your business uses, like Okta or Google Workspace.

SAML - One option for connecting a customer’s IdP to the CompanyCam applications.

Reach out to your Success Manager to let them know which Identity Provider (IDP) your company is utilizing.
Once the setup is complete in CompanyCam your Success Manager will reach out with the SP Entity ID, ACS URL and the specific attribute mapping for your IDP.
In your IDP add a new SAML application.
Add the Entity ID and ACS URL to the SAML configuration. Please note Entity ID may be called “Single sign-on URL” and ACS URL may be called “Destination URL”.
Set up the attribute mapping as outlined below:
id → user.id email → user.email firstName → user.firstName lastName → user.lastName
Assign the users who would like to access Company Cam to the SAML application.
Download the IDP metadata (or copy the metadata URL).
Reply to your Success Manager with the metadata file or URL and the list of Users (optional).
Once you receive a response from your Success Manager test the connection.

Q. How is CompanyCam implementing SSO?

A. CompanyCam implements SSO through WorkOS

Q. What IDPs can we support?
A. We can support any IDP with a SAML connection in addition to the ones listed below:

Q. Is user provisioning provided?
A. Not at this time. It is being considered in the next phase of development.

Q. Are we limited to logging in with SSO exclusively?
A. No, you can still log in via email. We do not enforce SSO only login.

Q. Can you manage User creation and deactivation via SSO?
A. No, you must invite (create) and deactivate Users via CompanyCam.

Q. What is the specific protocol?
A. SAML2.0