Setup Guide

​

Step 1: Access SSO Configuration

1

Open Workspace Settings

From your Ravenna dashboard, click on your workspace name in the top navigation and select Settings.

2

Navigate to Organization Integrations

In the left sidebar, click on Integrations under the Organization section.

​

Step 2: Start SSO Setup Wizard

1

Access SSO Setup

In the Organization Integrations section, find Single Sign-On and click Setup or Add SSO Provider.

2

Start Setup Wizard

The SSO setup wizard will open, providing a guided configuration experience for your identity provider.

3

Choose Identity Provider

Select your identity provider from the available options. Ravenna supports popular providers like Azure AD, Google Workspace, Okta, and custom SAML/OIDC providers.

​

Step 3: Configure Your Identity Provider

1

Follow Configuration Guide

Ravenna provides step-by-step instructions specific to your chosen identity provider. Follow the guide to configure your IdP with the required settings.

2

Configure Connection Details

Return to Ravenna and enter the required information from your identity provider setup:

These settings differ based on your IdP, but typically include:

• Entity ID: Your organization’s unique identifier in the IdP.
• Client ID: The application ID registered in your IdP.
• Client Secret: The secret key used to authenticate with the IdP.

This page also provides the callback URL that you need to configure in your IdP settings.

3

Create Connection

After entering your IdP details, save the configuration to create the SSO connection. This creates the connection but doesn’t yet link it to your organization.

​

Step 4: Configure Domain Settings

1

Review Default Managed Domain

Ravenna automatically includes your organization’s email domain as a managed domain for SSO. This is the domain associated with your Ravenna organization and requires no additional verification.

2

Add Additional Domains (Optional)

If you need to add additional email domains for SSO authentication, click Add Domain. Additional domains require domain ownership verification.

3

Verify Domain Ownership

For additional domains, you’ll need to verify ownership by adding a TXT record to your domain’s DNS settings. The SSO wizard will provide you with the specific TXT record value to add.

Domain Verification: This step ensures you have administrative control over the email domain before allowing SSO authentication for users from that domain.

4

Domain Realm Discovery (Enforced by Default)

Ravenna automatically enforces domain realm discovery for all managed domains. This means users with email addresses from your managed domains will be automatically redirected to your SSO provider and cannot use username/password authentication.

Important: Once SSO is enabled, users with email addresses from your managed domains will no longer be able to log in using username and password. They must use SSO authentication. Ensure you maintain at least one admin account with an email from a non-managed domain or a different authentication method as a backup.

​

Step 5: Test SSO Configuration

1

Run SSO Test

Use the built-in test functionality to verify your SSO configuration. This will attempt a test authentication flow.

2

Review Test Results

Check the test results to ensure authentication is working properly. The test will show you any issues that need to be resolved.

​

Step 6: Complete Setup

1

Complete SSO Wizard

After testing is successful, complete the SSO setup wizard by clicking the Complete Setup button.

2

Verify Connection

Once completed, you’ll see your SSO identity provider successfully connected in the Organization Integrations section.

​

Managing Your SSO Configuration

1

Edit SSO Settings

You can modify your SSO configuration at any time by returning to the Organization Integrations section.

2

Use Setup Wizard for Changes

When editing, you can use the setup wizard again to make changes to your configuration.

3

Notify Users

Inform your team members about the SSO activation and provide them with login instructions.

​

User Login Process

1. Users visit the Ravenna login page
2. Enter their email address
3. Click Continue with SSO
4. Get redirected to your organization’s login page
5. Complete authentication with corporate credentials
6. Automatically logged into Ravenna

​

Troubleshooting

​

Common Issues

​

Getting Help

1. Check the SSO logs in your Ravenna organization settings
2. Review your IdP logs for any error messages
3. Contact support with specific error messages and configuration details

​

Next Steps

• Managing SSO users and permissions
• Setting up automatic user provisioning (if supported by your IdP)
• Configuring additional security policies in your organization