Read supports single sign-on with a number of different SAML identity providers. This page explains the step-by-step process for setting up SAML authentication with Duo. For a list of other supported providers, see How to: Setup SAML Authentication with Read AI.

Prerequisites

In order to set up SAML authentication with Duo, you'll need:

• a Read Workspace with the Enterprise+ subscription
• someone who is an admin in your Read Workspace
• someone who is an administrator of your Duo account

Step-by-step instructions

1. Get your ACS URL and Entity ID

Start by having a Read Workspace admin go to Manage Workspace > Settings and expand the Advanced (Enterprise+ Required) section. Scroll down to the SAML section, where you can find and copy the ACS URL and Entity ID:
 

You'll need these in a later step.

2. Login to Duo and Setup a New Application

1. Once you've logged in, navigate to the 'Applications' menu and click 'Add Application'

2. From the Application Catalog, select 'Generic SAML Service Provider' and click 'Add'

3. You'll then be taken to the configuration section of your newly added Application. You can name the application 'Read AI' or any name of your choice: 

3. Connect Read to your SAML application

Now, you'll need to enter information from Read into Duo:

1. Make sure Meta Discovery is set to 'None'

2. Add your Entity ID from step one (https://api.read.ai) in the corresponding box

3. Add your ACS URL from step one in the corresponding box

   

4. Connect your SAML application to Read

The last configuration step is to enter information from Duo into Read AI:

5. Test the Integration

Once you have finished setting up your SAML application and turned it on for the desired set of users in your Duo configuration, you should test the sign-in process.