Configure Single Sign-On

Single Sign-On is now available for both ALICE Desktop (web) and ALICE Staff App (mobile). Single Sign-On allows users to authenticate through providers using the SAML 2.0 authentication language.

User Type & Roles

To perform this action in ALICE, the user must have at least Hotel Admin User Type or Hotel User Admin User Type access.

Things to Consider

  • To configure SSO in ALICE, provide a SAML 2.0 Identity Provider metadata  XML file to ALICE Staff for configuration. This file describes the SSO SAML 2.0 Identity provider details, among other authentication information, and is necessary to configure SSO.  

  • Please allow at least 1 week lead time after providing the XML file for configuration. 

  • Each user will need an SSO ID. This field is visible in the individual user profile, but can also be updated in bulk via the “Batch Add/Edit Users” option. This step is completed by the property. Step-by-step instructions to complete this are included below.

  • The SSO ID or EID does not have to be the same as the ALICE Username.

  • Non-SSO users with active ALICE user accounts will still be able to login to properties where SSO is enabled without using SSO authentication.

Steps

Download a list of your existing ALICE users from the “Manage Users” tab in ALICE Admin.

  1. Access ALICE Admin, then select “Manage Users”.

  2. Use the checkbox at the top of the user list view to select all of the users who will need to have SSO enabled.

  3. Select “Batch Add/Edit Users”.

  4. Select “Download Selected Users”. An excel file will be downloaded onto your computer.

  5. Open the file and find the SSO ID column.

  6. Input the SSO ID for each user.

  7. Save the template.

Upload the User template updated with the SSO ID Information included.

  1. Return to ALICE Admin and the “Manage Users” tab.

  2. Select “Batch Add/Edit Users”.

  3. Select “Upload Sheet”.

  4. Select the template that you have saved in the previous steps. The template you are uploading should include the SSO ID for each user. 

Once the template is uploaded successfully, the user will be prompted to log in with SSO instead of their ALICE login credentials.