Authentication to Certero | v8.1 and above

image-20251116-154618.png

Authentication to Certero has been enhanced with the release of v8.1, as part of the enhancements authentication now has its own menu item (Administration > Authentication Providers) and SAML 2.0 has been added to the list of authentication methods.

As part of this release, there is now a new login screen that is presented when accessing Certero, the currently configured authentication option can be accessed by clicking the 'Choose a different authentication method' link at the bottom of the screen.

You can then select your preferred authentication method.

Authentication methods supported are:

  • Local - Local account created in Certero

  • Windows Integrated - Authentication via users logged in Windows account

  • Forms - Active Directory Domain authentication

  • WS-Fed - Web Services Federation Protocol

  • SAML 2.0 -  Security Assertion Markup Language 2.0 authentication

Multiple authentication providers are supported for each of Forms, WS-Fed and SAML 2.0.

To support the enhanced authentication options within Certero a new Login type (External Account) has been added when creating Logins, the Username must match that of the authentication provider (i.e. Email address).

Below are some examples of how to configure the integration with SAML 2.0 providers:

Using Azure AD SAML 2.0 to authenticate access to Certero | v8.1

Using Okta SAML 2.0 to authenticate access to Certero | v8.1

Using PingOne SAML 2.0 to authenticate access to Certero | v8.1