Admin Console Configuration

Show Node Structure

Visit the Keeper Admin Console and login as the Keeper administrator.

SSO integration is applied to specific nodes (e.g. organizational units) within your Admin Console outside of the root node. To display the node structure, select Configuration then Show Node Structure.

Create SSO Node

Select the + button to create a new node which will host the Keeper SSO Connect integration for AD FS. The node can be anywhere in your organizational structure. In the below example, the node is called SSO - AD FS and added beneath the root node.

Select Create then select the node.

Each SSO Connection can be associated with a node. Therefore, your organization is able to create multiple SSO connections assigned to different nodes.

Add SSO Connection

Select the Provisioning tab of the node.

Next, select + Add Method link to create a new connection.

There are 2 parameters to configure. The Enterprise Domain and the New User Provisioning option.

Enterprise Domain

Every SSO Connection must be uniquely identified through the use of a supplied Enterprise Domain alias. This alias should be named something that is easy for your users to remember because they may need to type the name into their mobile and apps (iOS, Android, Mac, Windows) upon first logging into a new device.

New User Provisioning

Users can be dynamically provisioned to your Keeper Business account upon first successful authentication on SSO (Just-In-Time provisioning). For the best user experience, we recommend selecting this option. You can also manually invite users through the Admin Console Users tab, or invite users via the Keeper Bridge.

After configuring the Enterprise Domain and New User Provisioning select Save.

At this point, you can now configure the Keeper SSO Connect application.