Configuring Single Sign-On (SSO) for Wunderkind

Set up an SSO connection so your team can log in to Wunderkind using your organization's identity provider. This guide walks through the self-service setup flow using SAML, though the steps are similar for OpenID Connect (OIDC).

Before you begin

• Get your setup link. A member of the Wunderkind team (typically your CSM) will provide a self-service setup link.
• Use the link promptly. The link expires five days after it's generated.
• Only the person configuring SSO should open the link.
• Have access to your identity provider (IdP) so you can create the application and retrieve the required values.

Step 1: Start the setup

1. Click the setup link provided by Wunderkind. You'll arrive at the SSO setup page.
2. Click Get Started.

Step 2: Select your provider type

Choose the type of provider you use. Most organizations use either SAML or OpenID Connect. This guide uses SAML as the example.

Select SAML and click Next.

Step 3: Configure your identity provider

Wunderkind will display two pieces of information needed to configure the application in your IdP: A single sign-on URL and an entity ID.

1. Copy both values.
2. Enter them into your identity provider while setting up the Wunderkind application.
3. Return to the Wunderkind setup page and click Continue.

Step 4: Provide your connection details

You have two options for supplying your IdP's connection details:

• SAML metadata XML — paste your metadata XML if you have it, or
• Manual entry — provide the details individually:
  • Upload your certificate.
  • Enter your single sign-on login URL.

These values come from your identity provider. Once entered, click Create Connection, then click Proceed on the confirmation warning.

Step 5: Review attributes

Wunderkind will show the required and optional attributes for the connection.

• Required: an email address for all accounts.
• Optional: if configured in your SAML claims, Wunderkind will also import:
  • Given name (first name)
  • Family name (last name)
  • Phone number
  • Name (full name)

This screen is informational. Click Next to continue.

Step 6: Test the connection

1. Click Test Connection.
2. A new tab or window will open showing your company's login page, since Wunderkind will attempt to log in through your IdP.
3. Complete the login. When you see a testing complete message, close that tab and return to the setup flow.

Back on the setup page, you'll see the attribute information that was pulled in during the test, which lets you confirm your mappings are working as expected.

Step 7: Enable the connection

Click Enable Connection. Your SSO connection is now active, and your team can log in to Wunderkind using your SSO system.

Need help?

If you run into any difficulties:

• Reach out to the CSM who provided your setup link, or
• Visit support.wunderkind.co.