Configure SAML Login for Riva Cloud

Christian Delorey
Christian Delorey
  • Updated

Overview

Riva Cloud supports SAML 2.0 authentication, allowing administrators to sign in using their organization's Identity Provider (IdP), such as Microsoft Entra ID or Okta. 

Configuring SAML consists of three high-level steps: 

  1. Enable SAML for your Riva Cloud account
  2. Create a SAML application in your Identity Provider
  3. Configure Riva Cloud using the values generated by your identity provider

Before You Begin

Before you configure SAML, ensure that: 

  1. You have administrator access to your Identity Provider
  2. You have administrator access to your Riva Cloud account
  3. The Technical Support team has enabled SAML authentication for your tenant

Step 1 - Enable SAML for Your Riva Cloud Account 

SAML authentication must first be enabled on your Riva Cloud tenant. 

If this is your first time configuring SAML: 

  1. Contact the Technical Support team
  2. Request that SAML authentication be enabled for your tenant (please provide the profile name)
  3. Wait for confirmation before proceeding

Step 2 - Create the Identity Provider Application

Create a new SAML 2.0 application in your Identity Provider. 

Supported providers include: 

  • Microsoft Entra ID
  • Okta
  • OneLogin

For Microsoft Entra ID, follow: 

Create an Identity Provider application in Microsoft Entra ID. 

If you use another Identity Provider, please contact the Technical Support team if assistance is required. 

Step 3 - Configure Riva Cloud 

  1. Sign in to Riva Cloud as an administrator
  2. Navigate to Security -> Authentication -> SAML Authentication

The SAML configuration page appears

SAML Configuration Fields

Riva Cloud Field Description Source
Enable SAML Authentication Enables SAML login for your tenant. Only enable this after the configuration is complete. Riva Cloud
Identity Provider Entity ID Unique identifier for your Identity Provider. Often looks similar to https://sts.windows.net/<tenant-id>/. Identity Provider
Identity Provider Sign-in URL The SAML login endpoint used to authenticate users. Example: https://www.rivacloud.com/live/login.saml

For Dedicated Instances {vanityName}.my.rivacloud.com/{environment}/login.saml 		Riva Cloud
Identity Provider Logout URL Optional. Redirect location after a user signs out. Identity Provider
Identity Provider Certificate (Base64) Public signing certificate used by Riva to validate SAML responses. Copy the Base64 certificate contents from your Identity Provider. Identity Provider

After entering the required values, select Save.

Verify Configuration

After saving the configuration:

  1. Open a private/incognito browser window
  2. Navigate to your Identity Provider
  3. Select the SAML Application you created for Riva Cloud
  4. Confirm that:
    • Authentication succeeds.
    • You are returned to Riva Cloud.

If authentication fails:

  • Verify that the Entity ID matches exactly.
  • Confirm the Sign-in URL is correct.
  • Ensure the signing certificate has not expired.
  • Verify SAML has been enabled for your Riva Cloud tenant.