SSO Integration Guide
Prerender supports Single Sign-On (SSO) via SAML, allowing you to streamline user authentication across your organization. This guide outlines the requirements and steps to enable SSO with Prerender.
Prerequisites: To enable SSO, your Prerender account must be on a custom plan (Enterprise tier) or a corresponding package that supports multi-user accounts with SSO.
Information We Need From You
-
Existing Prerender Account ID:
-
We will link all SSO users to an existing account in Prerender.
-
Please provide the User ID for this account.
-
-
Custom Domain and Auth URL:
-
You’ll need a custom domain for your site and a corresponding authentication URL for the Keycloak realm we will create.
-
Examples:
-
Site URL:
yourcompany.app.prerender.io -
Auth URL:
yourcompany.auth.prerender.io
-
-
-
SAML URL:
-
The endpoint where SAML assertions will be sent
-
Information We Will Provide To You
Once the setup is initiated, we will share the following details:
-
Redirect URL (ACS URL):
-
The URL where your IdP will send SAML assertions.
https://auth.prerender.io/auth/realms/prerender-YOURCOMPANY/broker/YOURCOMPANY-saml/endpoint -
-
Service Provider Entity ID:
-
The unique identifier for your service in the SAML exchange.
https://auth.prerender.io/auth/realms/prerender-YOURCOMPANY -
-
Mapper: email
-
Used to map user attributes from your IdP to Prerender’s internal user structure.
-
SAML Integration Requirements
-
SAML Configuration File:
-
This file is required from your IdP and should include the entity ID, SSO URL, and certificate.
-
It will be imported into our Keycloak realm to establish the trust relationship.
-
-
ACS URL Configuration:
-
Ensure the ACS URL we provide is correctly configured in both your IdP and Prerender settings to guarantee seamless authentication.
-
Getting Started
Once you have the required information, please reach out to our support team to initiate the SSO setup.