Does Intelligent Logistics Support SSO?
Yes! Intelligent Logistics supports SSO. Please note that this is currently in BETA status as of April 2026. If you are interested in enrolling in SOO, please reach out to your Customer Success Manager.
How Is SSO Configured?
We support Single Sign-On (SSO) integration to allow your users to authenticate using your organization's existing Identity Provider (IdP). SSO authentication is supported via two industry-standard protocols:
- SAML 2.0
- OpenID Connect (OIDC)
Note: SSO enables authentication only — user authorization and role assignment must still be configured within the application after setup.
Before You Begin
To get started, please have the following information ready to share with our team:
- Identity Provider (IdP) — Which IdP are you using? (e.g., Microsoft ADFS, Microsoft Entra ID, Okta, Azure AD, PingFederate, etc.)
- Preferred Protocol — Do you have a preference between SAML 2.0 and OIDC? (Note: For Microsoft ADFS / Entra ID, we recommend SAML.)
- Technical Contact — Who will be the primary technical contact for the configuration process?
SAML 2.0 Configuration
Step 1 — Create an Enterprise Application / Service Provider in Your IdP
Register a new application or Service Provider (SP) in your Identity Provider using the following details. Note the value for CUSTOMER_NAME will come from the URL you use to log into Intelligent logistics. For example, if the URL you use for Intelligent Logistics is https://skipum-ACMECO-skipum-approuter.cfapps.us10.hana.ondemand.com/cp.portal/, then the CUSTOMER_NAME would be ACMECO. You will need to reach out to your CSM for the sp_name value:
| Field | Value |
| Identifier (Entity ID) | al9n3uqyg.accounts.ondemand.com |
| Reply URL (Assertion Consumer Service URL) | https://al9n3uqyg.accounts.ondemand.com/saml2/idp/acs?sp=<sp_name> |
| Sign-On URL (Portal URL) | https://skipum-CUSTOMER_NAME-skipum-approuter.cfapps.us10.hana.ondemand.com/cp.portal/site |
| Logout URL | https://al9n3uqyg.accounts.ondemand.com/saml2/idp/slo/al9n3uqyg.accounts.ondemand.com?sp=<sp_name> |
Step 2 — Configure Attribute Mappings / Claims
Set up the following attribute mapping in your IdP:
| Attribute Name | IdP Source Value |
| firstName | user.givenName |
Additional attributes may be required depending on your environment. Our team will confirm any further mappings during the setup process.
Step 3 — Share Your Federation Metadata
Provide us with your IdP's Federation Metadata in one of the following ways:
- Metadata XML file — Export and send the file directly to your technical contact at our team.
- Metadata URL — If your metadata endpoint is publicly accessible, share the URL and we'll fetch it directly.
OIDC Configuration
Step 1 — Create a Client / Realm in Your IdP
Register a new OIDC client or application within your Identity Provider.
Step 2 — Share Your Discovery URL and Client Credentials
Once the client is created, provide us with:
- OIDC Discovery URL (e.g., https://your-idp.com/.well-known/openid-configuration)
- Client Authentication Method and the associated credentials
Supported Client Authentication Methods
| Method | Details |
| Client ID / Secret (Body) | Client credentials passed in the request body |
| Client ID / Secret (Header) | Client credentials passed as a Basic Auth header |
| Private Key JWT | Signed JWT using your private key |
| Client Assertion (Body) | Client assertion JWT passed in the request body |
Getting Started
To initiate your SSO setup, please reach out to your Intelligent Logistics Customer Success Manager with the information outlined in the Before You Begin section above. Our team will guide you through the remaining steps and confirm any environment-specific requirements.