If you want to link or embed sign-in-protected content or services from outside the platform, the SAML Integrations plugin is one option that creates a seamless user experience. Once your IT configured the connection in the SAML Integrations plugin, app users that are signed in to the Staffbase platform can automatically access the sign-in-protected content or service. The SAML Integrations plugin uses the SAML protocol, an industry-standard, to authenticate a user’s identity between two systems. This is a valuable feature that makes confidential company data accessible in your Staffbase platform or gives access to third-party services in a secure manner.

Embedding Sign-In-Protected Content and Services with the SAML Integrations Plugin

1. Get support from your IT department to set up the SAML Integrations plugin for the SSO sign-in.
   After the connection is readily configured, you can make final adjustments before publishing. 
2. In the Studio, navigate to SAML Integrations.
3. Click the SAML connection that you want to embed. 
   
   
4. Optionally, use the Live preview to see how the embedded content or service will look for your users. 
5. Optionally, click the gear wheel to open the settings and configure the visibility, editors, or further settings for this SAML integration and save them. 
6. Click Publish to embed the sign-in-protected content or service.
   A new menu item with the embedded service is added to the platform. 

Deep Linking to a Sub-Page of the Sign-In-Protected Service

One great advantage of embedding with the SAML Integrations plugin is that you can directly link to a sub-page in the external content or service. This is called deep linking. The sub-page in the external content or service is then embedded within the platform and appears to be a normal page within the App. The users will neither notice the sign-in nor that the content or service is provided from an external source.

Prerequisites

• You have the complete link to the sub-page in the external content or service. 
• The provider of the external content supports the SAML RelayState. More information on the SAML RelayState in the official SAML documentation.

1. Configure the SAML connection as described with the help of your IT department. 
2. Navigate to the SSO connection that gives access to the sub-page you want to link. 
3. Click the gear wheel to open the settings. 
4. For Visibility in the App, configure the SAML connection For all users. 
5. For Show in menu on, deselect the desktop and mobile icon.
   
   
6. Click Save.
7. Click Publish.
   The SAML connection works but is not visible to your users in the menu. To give your users access to the sub-page, you now configure the deep link.
8. Click Preview.
9. Copy the link. 
   
   
10. Paste the link in a text editing tool.
    The link must not contain any spaces or hard breaks. If the link runs on to a new line in the text editor, this is fine.
11. Adjust the link as follows:
    
    • If you use the link in the App itself, add the path to the subpage at the end, for example: 
      https://app.yourcompany.com/content/saml/contentID123456/path-to-sub-page
    • If you use the link outside the App, add the path and additionally the open link parameter after your custom domain, for example: 
      https://app.yourcompany.com/openlink/content/saml/contentID123456/path-to-sub-page

You can now use the deep link, for example, with the Links plugin or in the Links widgets. Paste the deep link you just created as the target URL. 

How Users Will View the Embedded Content in the App 

For example, embed your Idea Portal with the SAML Integrations plugin and make it accessible as a menu item:

With the deep linking technology, directly show a very popular idea in your idea portal:

Additional Helpful Information

• More information on deep linking in the Staffbase platform