Single Sign-on (SSO) Setup Guide

Introduction

This guide is designed for your businesses IT team to configure Thrust Carbon to act as a Service Provider within your business’s Single Sign On system. Please provide this guide in full to your IT team.

Your Identity Provider configuration settings

At a minimum, please provide Thrust Carbon with:

• Entity ID assertion URL

• Single Sign On URL

• Single Logout URL

• X.509 certificate

Please communicate this directly to your Thrust Carbon account manager. If possible, please communicate the certificate using the preferred secure file platform at your business. Please let Thrust Carbon know if you require this action to be initiated on our end.

SAML Attribute Mapping

If possible on your system, please map the following SAML attributes:

1. Employee email to ‘email’

2. Employee id to ‘employee_id'

3. Employee first name to ‘first_name’

4. Employee last name to ‘last_name'

SSO Activation

After you provide your Identity Provider (IdP) configuration settings, we will configure your Idp and provide you with your SAML Configuration URLs.

At this point you will be able to login to our system using SSO in 2 ways:

1. From our system at: https://app.thrustcarbon.com/sso/login 

2. From your portal using your SAML configuration URLs

SAML Configuration URLs

Once your SSO integration is activated we will provide you with your SAML configuration URLs that will have the following format:

• ACS URL: https://thrustcarbon.com/auth/saml2/xxxxxx/acs

• Login URL: https://thrustcarbon.com/auth/saml2/xxxxxx/login

• Logout URL: https://thrustcarbon.com/auth/saml2/xxxxxx/logout

• Metadata URL: https://thrustcarbon.com/auth/saml2/xxxxxx/metadata

• SLS URL: https://thrustcarbon.com/auth/saml2/xxxxxx/sls

Contact details

Your internal stakeholder should have shared contact details for a technical activation expert at Thrust Carbon. If there is any confusion or escalation required, please reach out to support@thrustcarbon.com.