TicketSlate Login
In the "Settings | Authentication" screen, "TicketSlate Login" is the default authentication method you start out with.
This option uses the help desk database to manage and authenticate your users.
When this option (or both) is set the login screen for the help desk will have a "Forgot password" link, allowing users to send a password reset link to their email.
Also, you have the option to turn on "Allow users to self-register"
This will show a "register" link on the login screen. Allowing anyone to create their own account.
SAML Authentication
SAML is a common authentication method available from many service and identity providers.
To set up SAML for TicketSlate navigate to "Settings | Authentication" and choose "SAML" (or both) from the login method dropdown.
Metadata
Most identity providers will provide you with a "metadata" XML file or a URL which displays the metadata in XML format. You can save this file/page and upload the XML file to pre-fill in all the boxes.
If you do not have an XML file, you'll need to provide the following:
- Identifier of the Idp (identity provider)
- Sign-on URL
- Sign-out URL
- Contents of certificate (without the BEGIN/END lines)
You typically provide your identity provider our (the service provider) metadata file as well, which could also be found on this screen in XML format.
Attribute Mapping
In order to link attributes from your identity provider to TicketSlate, you need to provide mapping information. In the appropriate boxes, enter the name of the attribute that is send from your identity provider.
For example: A first name is typically called "givenName" in Microsoft/LDAP environments. Or, your attribute might also look similar to "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailAddress"
Both
You can also use both authentication methods. If you choose this, user's are sent to your SAML identity provider first. To bypass SAML you would need to manually visit https://yourcompany.ticketslate.com/app/login