#Watermark insights software#

Ownership of the Information, Materials and Software Comprising the ServiceĢ.1 BY POSTING MATERIAL TO THE WEBSITE, YOU WILL NOT SURRENDER ANY INTELLECTUAL PROPERTY RIGHTS YOU MAY HOLD IN THE POSTED MATERIALS, OTHER THAN THE LIMITED LICENSE GRANTED TO WATERMARK AS SET FORTH IN SECTION 2.3. The following is a binding contract between you and Watermark, which establishes your and Watermark’s rights, obligations and liabilities regarding your use of the Service (“the Agreement”).Ģ. Our team of integration specialists will work with your technical liaison to complete the setup.1.1 Prior to registering for the services (the “Service”) offered on Watermark’s Website (“the Website”), the End User (“you”) must agree to the following terms and conditions between you and Watermark, LLC (“Watermark”). Once we receive the above information, we'll supply a SAML Metadata file and SSO URL to you and your technical team will be able to configure Watermark as a relying party using these metadata and perform a login test. You must populate nameid with a unique value, and we recommend email address as the value unless you have a different preference. We also require a nameid for session management. We use email for matching to determine if the user is able to log in to Navigator. Let us know what labels you used to represent these concepts.

Your User Attributes. We’re looking for the following user attributes: first name, last name and email.

For instance, don't provide an account that has access to email in addition to SAML. The account should be named in a generic manner that's obvious to its purpose, e.g., 'WM_SAML Test.' The account should not have access other than to log in through SAML.

Test user account: An account you should keep enabled that we'll use to test your configuration now and in the future.

X.509 Certificate: The certificate itself, your IdP metadata or IdP metadata URL.

it might look like ' /idp/profile/Logout' it might look like ' /adfs/ls/,' which is the same as the sign-in URL

Sign-out URL: The URL of your IdP that accepts SAML logout requests.

it might look like ' /idp/profile/SAML2/Redirect/SSO' or ' /idp/profile/SAML2/Post/SSO'

Sign-in URL: The URL of your IdP that accepts SAML login requests.

We'll prevent sign-ins from other email domains.

Email Domain(s): A complete list of the email domains, e.g.,, , that we should allow to sign-in.

To get started with SAML through Navigator, submit a general work request with the following information: This means that in addition to providing a secure sign-on method, it also provides a single front door to access all of your Watermark products. The Watermark Navigator allows users with matching accounts in multiple products to toggle between those products. Watermark supports SAML SSO through Watermark Navigator.

SAML SSO is more secure and much easier to configure and maintain than the LDAP and HMAC Portal methods and does not require any ongoing subscriptions to federations, nor does it require a third-party vendor between your campus and Watermark.

The clarity and simplicity of the single sign-on experience - with no need to remember more sets of credentials - will reduce the risk of user confusion, and decrease the number of helpdesk requests you receive about accessing your Watermark systems. It is likely the method of single sign-on that your IT teams favor. Implementing SAML SSO will ensure your faculty and staff can access the system efficiently and securely, using their single set of campus credentials. SAML SSO is the most modern, reliable single sign-on configuration, and is now the industry-preferred standard for user authentication.

Watermark insights