Enable Shibboleth integration

Setup Shibboleth IdP

Test SSO

Log in to your Cheqroom account

Go to Settings

Go to Integrations

Find the SSO Shibboleth integration and click Configure

Choose a Default user role, this will be assigned to a user who logs in through Shibboleth Idp SSO but has no assigned role. Here we recommend using a role that hasn't got a lot of permissions (for example the Equipment Viewer role)

Choose where your roles are sourced, this lets you choose if you want to manage the roles from Shibboleth IdP or keep the role management in Cheqroom. More information can be found on the Configure how roles are managed for SSO help article.

Fill in the Domains field, by default, we already add the domain of your email address. In some cases it can be that you have multiple email domains (f.e john@yourcompany1.com and john@yourcompany2.com), then you need to add both domains.

Click Next to proceed to the Shibboleth IdP setup.

Download the Cheqroom metadata file

Copy the downloaded metadata (cheqroom_metadata.xml) to the following location on your IdP:
​%{idp.home/metadata/}

Add a MetadataProvider for Cheqroom in your the metadata-providers.xml file:
​<MetadataProvider id="LocalMetadata" xsi:type="FilesystemMetadataProvider" metadataFile="%{idp.home}/metadata/cheqroom_metadata.xml"/>
​

Edit the attribute-filter.xml file and make sure the following attributes are configured for Cheqroom application:

​Also make sure that you return a Name Identifier (NameID) in your SAML response

Add the metadata file of your Shibboleth IdP and click Enable SSO