Today, Vantage announces the general availability of SAML Single Sign-on (SSO) support for Vantage customers in the Enterprise Tier. SSO enables teams to easily onboard onto Vantage by connecting Vantage’s authentication system to an organization’s existing identity backend. This service is backed by a best-in-class authentication provider, Auth0, and supports several standard identity backends such as Google, Active Directory, and other SAML-compatible systems.
Previously, Vantage customers could sign up with an email and password or with their GitHub account. Customers could quickly onboard and invite teammates, but they had no way of authorizing multiple users in their organization to Vantage without manually adding their email addresses individually. Additionally, if someone is off-boarded from your organization you had to ensure you manually removed their access from Vantage, which added additional work.
Now, SSO enables Vantage customers in the Enterprise Tier the ability to connect their existing identity backends to Vantage and quickly onboard their teammates onto the platform. After having SSO enabled for their account, admins can follow the existing invitation flow and enter user emails that match their identity provider. After the invite is accepted the user will be redirected to their identity provider in order to log in to Vantage. If a user is removed from the identity backend their access to Vantage will also be removed.
"We chose Auth0 as our third-party authentication provider because of their proven track record. Security and reliability are two of the most important considerations when choosing a provider in this space and Auth0 more than meets both of those requirements. On top of those requirements, our team was very impressed with the ease of integration and speed of innovation by the Auth0 product team", said Ben Schaechter, Co-Founder and CEO of Vantage.
SAML Single Sign-on is available to all Vantage customers in the Enterprise Tier today and Auth0 is now the authentication provider for all Vantage users. The first time you log into Vantage you will be prompted to authorize Auth0 to access your Vantage account. If you are a Vantage customer in the Enterprise Tier and want to connect with your identity provider, email support@vantage.sh.
Frequently Asked Questions
1. What is being launched today?
Today, Vantage is launching SAML Single Sign-On (SSO) support. Vantage now syncs with customers’ identity providers such as Active Directory, Google, or any SAML backend to provide a secure, seamless ability to authorize users to use Vantage.
2. Who is the customer?
SAML SSO is available to Vantage customers in the Enterprise Tier.
3. How much does this cost?
SAML Single Sign-On (SSO) support is included in the cost of an Enterprise Tier subscription. If you are interested in getting set up with SAML Single Sign-on but aren’t currently in the Enterprise Tier, please contact Vantage support.
There is an additional cost that is worked into the subscription dependent upon how many employees you would like onboarded.
4. Which identity providers are supported?
Azure Active Directory, Google, and any SAML-compatible backend are supported. If you would like support for an alternative identity provider, please contact support@vantage.sh.
5. What is Auth0?
Auth0 is a best-in-class authentication provider. They are trusted by enterprises such as Pfizer, AMD, Blue Cross Blue Shield, and Toast. You can read more about their security practices here - https://auth0.com/security.
6. If I am an existing Vantage customer and do not want to use SSO how does this affect me?
Existing customers can continue to log in with their existing email and passwords. You will see a slight change to your login flow. When you visit the console will be redirected to https://auth.vantage.sh and after authenticating will be redirected back to the Vantage console. If this is the first time you are logging in you will need to authorize Vantage to access your Auth0 credentials.
Along with SSO support for Enterprise customers, Vantage is also enabling logging in with Google for all users. This makes it easy for individuals to use their personal or work Google account to sign up for Vantage without having to create another email and password combination.
7. What is SAML?
SAML is an acronym that stands for Security Assertion Markup Language. SAML is an open standard for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider. SAML is an XML-based markup language for security assertions.
8. My organization has a Multi-Factor Authentication policy—does Vantage SSO support/handle this?
Yes, if your identity provider requires MFA, that will still be part of the authentication flow before being redirected back to Vantage.
9. If I am a Pro or Business customer and would like to enable SSO with my own identity provider how do I go about doing that?
Please contact sales@vantage.sh and we will get in touch with details on provisioning an Enterprise Tier for you with a corresponding quote.
10. I have existing users I’ve invited to my Vantage team without SSO. How do I transition them over to my identity provider?
Once your account is enabled for SSO those user accounts will be automatically transitioned from email and password authentication over to SSO.
11. I am a Vantage customer in the Enterprise Tier, how do I enable SAML Single Single-on?
Contact support@vantage.sh and we will collect the required information to enable SSO for your account.