Skip to main content

UXCam SSO migration guide

For better security, UXCam moved single sign-on (SSO) to a new service. If your organization uses SSO in UXCam today, update two URLs in your identity provider (IdP) and confirm the change in UXCam. It takes about 10 minutes, and SSO stays on the whole time.

Before you start

You need to do this if the SSO settings page in UXCam shows "Action required: Update configuration in your Identity provider (IDP)". The page also shows the date by which the change must be made.

You need:

  • An Owner or Manager role in your UXCam organization.

  • Admin access to your identity provider (for example Okta, Microsoft Entra ID or Google Workspace), to edit the UXCam app there.

  • A browser that allows pop-ups from UXCam. The last step opens a small test window.

Your members don't need to do anything. Your IdP's own values (SSO URL, Entity ID and certificate) stay the same.

Steps

Do steps 3 and 4 one right after the other: between them, SSO logins for your team do not work.

The Single Sign On tab in the UXCam dashboard: the deprecated URLs, the new Entity ID and ACS URL with copy buttons, and the Action required box with the confirm button

  1. Open your SSO settings in UXCam.

    • Go to the organization settings and open the Single Sign On tab.

    • You see the old URLs marked as deprecated, the new URLs, and a yellow "Action required" box.

  2. Copy the new URLs.

    • Use the copy buttons next to the new Entity ID and ACS URL, so they are copied exactly. Keep this page open.

  3. Update your identity provider.

    • Open the UXCam app in your IdP.

    • Replace the old Entity ID and ACS URL with the new ones, and save.

    • The next section shows where these fields are in common IdPs.

  4. Confirm in UXCam.

    • Back on the Single Sign On tab, click I've updated configurations in my Identity provider (IDP).

    • A test window opens.

    • Sign in there with your company account.

  5. Check the result.

    • Test passed: the yellow box and the old URLs disappear. You are done. SSO now uses the new URLs.

    • Test failed: nothing changed on the UXCam side. Check that both URLs in your IdP match the new ones in UXCam, then click the button again.

If the test window does not open, allow pop-ups for UXCam in your browser and click the button again.

Where to find the fields in your identity provider

Each IdP names the two fields a little differently.

Identity provider

Entity ID goes in

ACS URL goes in

Okta

Audience URI (SP Entity ID)

Single sign-on URL

Microsoft Entra ID (Azure AD)

Identifier (Entity ID)

Reply URL (Assertion Consumer Service URL)

Google Workspace

Entity ID

ACS URL

Other IdPs

Audience, Audience URI or SP Entity ID

ACS URL, Reply URL or Single sign-on URL

If your IdP keeps more than one value in these fields, replace the old UXCam URL instead of adding the new one next to it.

Common questions

What happens if we don't update?

  • Your current SSO setup keeps working until the date shown on the Single Sign On tab. After that date, SSO login stops working until the URLs are updated.

Do our team members need to do anything?

  • No. Only the person who manages your identity provider makes the change.

Do we need to turn SSO off first?

  • No. SSO stays on the whole time, and UXCam switches to the new URLs only after the test login passes.

Something went wrong and nobody can log in.

  • Contact UXCam support. We can update your SSO settings for you.

Did this answer your question?