skip navigation
See Also
Change account settings
Set up Trumba SSO in Microsoft 365 / Microsoft Entra ID
Visitor accounts: An overview
Organizers and event check in

Single Sign-On

By implementing Single Sign-On (SSO), you give Trumba® publishers and editors access to their Trumba accounts through one standard sign-in process. No separate Trumba usernames and passwords are required.

For example, after SSO is set up, each Trumba account holder can use the same URL to directly access their individual accounts.

To provide SSO support, Trumba uses the Security Assertion Markup Language (SAML) XML standard. Trumba, as the service provider, communicates with your organization's SAML 2.0 identity provider. Your identity provider controls the information used to authenticate users.

Note Trumba Corporation is a sponsored partner member of the InCommon® Federation, which means that Trumba's SAML metadata is automatically propagated to the identity provider software of other InCommon participants.

What you'll learn in this topic

Gather the required information

To set up SSO in Trumba, you need to gather the following information from your SAML 2.0 identity provider software:

  • Entity ID A unique ID for your identity provider normally in the form of a URL. For example, https://idp.yourorganization.com/idp.
  • SAML Metadata An XML document that contains detailed information about your identity provider and how to communicate with it.
    • Automatic Loading In many cases, your identity provider supplies its metadata through the Entity ID URL, which means Trumba can automatically load the metadata through a web request.
    • Manual Loading If the SAML Metadata is not provided automatically, obtain the metadata from your IT department and forward it to Trumba Support for review and entry.

    Note Trumba supports the SAML protocol which is also supported Active Directory Federation Services (ADFS). Trumba requires only the SAML metadata from your ADFS system, and how the user's email address is returned in the SAML response, either through the NameIdentifier element or a named attribute. For the Trumba metadata for setting up ADFS, see: https://www.trumba.com/sp.

  • Sign In Email Source When a Trumba account holder signs in, your identity provider software must supply the email address associated with the Trumba account. This address can be found in one of these fields:
    • The Name Identifier element.
    • The eduPersonPrincipalName Attribute An attribute commonly used by higher education institutions.
    • A Custom Attribute.

    During the set-up process, you select the location of the email address. If the location is a custom attribute, you also provide the attribute name.

    Tip To avoid sign in conflicts after you set up SSO, editor account holders won't be able to change the email addresses and passwords associated with their Trumba accounts. Those options will be disabled in the editors' account settings forms. Administrator account holders will still be able to change editor sign-in credentials using the Administer Accounts option. Learn more.

Set up SSO in Trumba

To establish a trust relationship between Trumba and your identity provider software, go through this one-time set-up process.

  1. From your primary publisher account, select the Administer Accounts link, such as in this example from the fictitious Trumba University account:

    Administer Accounts

    Note If the Administer Accounts link is not available, please have your primary account holder contact Trumba Support at support@corp.trumba.com.

  2. From the Administer Accounts page, select Set Up Single Sign-On.
  3. On the Single Sign-On Setup page, under Single Sign-On Setup:
    • For Enabled, select Yes.
    • For Permit Direct Sign-In, to let account holders continue to sign in directly using their Trumba usernames and passwords, select Yes.

      Tip Even with No selected, account holders can use their Trumba credentials to perform a limited set of API-related activies, such as accessing outbound feeds and ICS put operations.

    • For Enable Single Sign-Out, select Yes to enable account holders, when signing out of Trumba, to also sign out of their organization account (when supported).
    • For Identity Provider Entity ID, provide the ID in the form of a URL that you previously gathered.
    • For Sign-In Email Location, select the field where the Trumba account email address can be found in your identity provider software.

      If you select Custom Attribute, provide the attribute's name.

    • User Name Location: Select the appropriate attribute where the user's name (e.g. “John Doe”) can be found in your identity provider software. Selecting None causes the email address to be used for the user's name.

      If you select Custom Attribute, provide the attribute's name.

    • Unique User ID Location: To uniquely identify SAML visitor accounts and support SAML SSO account email changes, you must specify the location for your organization’s unique user ID.

      If you select Custom Attribute, provide the attribute's name.

      How do I support SAML SSO sign-on to the Event Actions web app?

  4. Under SAML Single Sign-On Information, you see three key URLs:
    • Trumba Entity ID Trumba's unique SAML service provider ID. You'll need this later when it comes to configuring your identity provider software.
    • Assertion Consumer Service URL The endpoint where your Identity Provider must redirect to with its SAML authentication response. This URL is automatically added to your Identity Provider when you load the Trumba SAML metadata. When configuring your Identity Provider without SAML metadata, you will need to enter this URL into your Identity Provider manually.
    • Your Sign-In URL Custom URL you provide to your organization's Trumba account holders. All account holders use this same URL to directly access their accounts.
  5. Click Save Changes.

Configure your identity provider software

As the final step in the SSO set up process, configure your identify provider software so it recognizes Trumba as a service provider. Typically, this means entering the Trumba Entity ID and SAML metadata into that software.

  • As described above, you can find the Trumba Entity ID on the Single Sign-On Setup page.
  • If you are an InCommon participant, an automated process should download the Trumba SAML metadata and add it to your identity provider software.

    If you're not an InCommon participant, to retrieve the SAML metadata, type the Trumba Entity ID URL into a browser address field.

Need an SSO solution for your organization?

If you need an SSO solution for your organization, consider the Idaptiv Identity Service. The Idaptiv App Catalog includes Trumba to simplify the setup.

Enable single sign out

If you need an SSO solution for your organization, consider the Idaptiv Identity Service. The Idaptiv App Catalog includes Trumba to simplify the setup.

Next steps

For next steps, check into what you can do beyond establishing SSO for Trumba publisher/editor accounts, including: