Ping Identity

This article gives the steps to configure Auth0 as the identity provider for NocoDB.

NocoDB, Retrieve SAML SSO Configuration details

1. Go to Account Settings.
2. Select Authentication (SSO).
3. Click the New Provider button.
4. In the dialog, type a Display name for the provider. The login page shows the provider with this name.
5. Copy the Redirect URL & Audience / Entity ID. You need these values later to configure the identity provider.

Ping Identity, Configure NocoDB as an Application

1. Sign in to your PingOne account and go to the homepage.
2. In the top-right corner, click Add Environment.
3. On the Create Environment screen:
   • Select Build your own solution.
   • In the Select solution(s) for your Environment section, select PingOne SSO from Cloud Services.
   • Click Next.
   • Type a name and a description for the environment.
   • Click Next.
4. Open the new environment. In the sidebar, go to Connections > Applications.
5. On the Applications homepage, click the "+" icon to create a new application.
6. On the "Add Application" panel:
   • Type the application name and description.
   • For the Application Type, select "SAML Application". Then click "Configure."
   • In the SAML Configuration panel, select "Manually Enter."
   • In the ACS URLs field, enter the Redirect URL from step (2) above.
   • In the Entity ID field, enter the Audience URI from step (2) above.
   • Click Save.
7. In your application:
   • Go to the Configurations tab.
   • Copy the IDP Metadata URL.
8. On your application panel, set the switch in the top-right corner to on. This activates user access to the application.

NocoDB, Configure Ping Identity as an Identity Provider

1. Go to Account Settings > Authentication > SAML.
2. Enter the Metadata URL from the step above. You can also configure the XML directly.
3. Click Save.

Users now see the Sign in with <SSO> option on the sign-in page.

Availability

• SAML SSO is available on NocoDB Cloud (Business plan and above) and on licensed self-hosted deployments (Business plan and above). For access, reach out to sales team.
• On the Business plan, the SSO configuration menu is in the workspace sidebar, at Settings > Single Sign-On (SSO). For more details, refer here.
• Domain Verification Required for Cloud Plans: Verify your domain in NocoDB before you configure SAML SSO. Cloud Business and Enterprise plans both need this. Only users with email addresses from verified domains can sign in with SSO. For details, see Domain Verification.