Luckey Setting – SAML SSO Configuration

The SAML SSO Configuration section allows administrators to set up and manage Single Sign-On (SSO) access for their organization directly from the Luckey Web Application. This feature is available whenever a SAML SSO plugin is active on the system — for example, if your company uses Microsoft Entra ID (Azure AD) or Google Workspace as its identity provider.

By integrating Luckey with your company’s SSO system, users can log in using their existing corporate credentials, improving security and simplifying access management across platforms.

To access the configuration, navigate to Settings → SAML SSO in the Luckey Web interface.
From this page, administrators can find all the information needed to complete the connection between Luckey and their chosen identity provider.

Within the SAML SSO section, two key parameters are displayed:

• Assertion Consumer URL (or Reply URL) – This is the address to which your identity provider will send the authentication responses after a user has successfully logged in. You’ll need to copy this URL and paste it into your identity provider’s configuration page.
• Relying Party Identifier (or Identifier) – This is the unique ID that your identity provider uses to recognize Luckey as a trusted application. It must be set exactly as shown in your identity provider’s configuration.

Once you have retrieved these parameters, you can complete the setup by uploading your SAML metadata file directly from the same Luckey page. This file, usually provided by your IT department or identity provider, contains all the necessary information such as certificates, endpoints, and identifiers. Luckey automatically validates the metadata and applies the configuration once uploaded.

After the integration is complete, your users will be able to log into Luckey using their company credentials. This ensures a seamless and secure authentication flow, reducing the need for password management and maintaining centralized control over access policies.