CORE MODULE

Setting Up Single Sign-On (SSO)

What you'll learn in this guide

‍How to get SSO switched on for your Chandler CX tenant — what your IT team needs to gather, who to contact, and what to expect during onboarding so your users can log in quickly and securely.

Overview

Single sign-on (SSO) lets your users access Chandler CX using the same login they already use for the rest of your organisation's tools. No separate passwords to remember, no extra accounts to manage, and your IT team keeps full control over authentication.

SSO is configured at the tenant level by a Chandler CX technical specialist working alongside your IT team. The process is quick when the right details are gathered up-front, so the bulk of this guide is about what to pull together before you reach out.

This article walks you through what you'll need to provide, the steps to activate SSO, and a few things worth knowing once it's up and running.

‍

Heads up
‍Only administrators can request or configure SSO at the platform level. If you're not sure who that is in your organisation, your Chandler CX Account Manager can point you in the right direction.

‍

What you'll need to provide

Before you kick things off, gather the following from your IT or security team. Having these ready means setup can move straight into configuration rather than back-and-forth emails.

  • Identity provider details — the name of your SSO identity solution, such as Azure AD, Okta, or ADFS.
  • Login URL — the Security Assertion Markup Language (SAML) SSO endpoint URL provided by your IT team or identity provider.
  • Logout URL — the endpoint for Single Logout, if your identity provider supports it. This one's optional.
  • X.509 certificate — the public certificate your identity solution uses for authentication.
  • Your main organisational domain(s) — the email domain(s) you want federated, for example yourcompany.com.
  • Any additional instructions or security policies from your IT or security team that affect how authentication should be managed.

‍

Activate SSO

Once you've gathered the details above, here's how the activation process runs from start to finish.

  1. Contact your System Administrator to start the conversation about enabling SSO for your tenant.
  2. Gather the identity provider details, URLs, certificate, and domain information from your IT department.
  3. Work with your System Administrator and CX Platform's onboarding team to safely exchange and configure your SSO integration.
  4. Chandler will confirm the setup, run test sign-ins, and activate SSO for your users.

That's it — once activation's confirmed, your users can sign in to CX Platform using their existing organisational credentials.

‍

Good to know

‍

Keep your technical contacts in the loop
‍Make sure the people who manage your identity provider are available during onboarding. It keeps things moving and means any questions can be answered straight away.


A few things worth keeping in mind once SSO is in place:

  • Your IT or security team stays in control. Chandler CX follows your organisation's authentication procedures — we don't override or replace them.
  • Certificate updates need a heads-up. If you rotate or update your SAML certificate, let Chandler know in advance so SSO keeps working without interruption.
  • Identity provider changes matter too. Any changes to your IdP setup (new endpoints, policy changes, provider switches) should be flagged to your Account Manager so the integration can be updated.

‍

What's next

For a smooth experience, get in touch with your System Administrator to start the conversation. They'll work alongside you and your IT department to make sure your users get a fast, seamless, and secure login experience from day one.

‍

In this article

Article link for H2 class