Switching SSO url (Proxy)

This log in service enables you to login via one centralised service at all various Officebooking communities. We don’t need any different apps, all customers will login via one app.

If your organization uses login with SSO, you will need to change the current settings. Before you have made that change, you will continue to be directed to the ‘old’ login service. Your users will first enter their email address via the new login service, but will then be redirected to the old login service.

Changing the SSO settings is a four-step process:

Log in to the OfficeAdmin
Change Identifier and Reply URL
Activate new login within the OfficeAdmin
Testing new login service

Note: Once you have made changes to the SSO settings in Azure AD or Google Workspace, you must immediately perform the second step in OfficeAdmin, as all users will be redirected to the new service immediately.

Step 1: Log in to the OfficeAdmin

First, log in to the OfficeAdmin. The moment you have changed the SSO settings in Azure AD or Google Workspace, you will need direct access (without having to log in again) to the OfficeAdmin portal to be able to change your company settings and activate the new login service.

Step 2: Change Identifier and Reply URL

Follow the steps below to switch within Azure AD and Google SSO. Clients who log in via F5 and Surfconext contact Officebooking support directly.

Azure AD

Login in on Azure AD.
Select ‘Enterprise Apps’.
Select the Officebooking app that’s already there.
Navigate to ‘Single Sign On’.
Change the Officebooking url within the Identifier (Entity ID) and the Reply URL (Assertion Consumer Service URL or ACS). Where the url used to point to the old login service, it should now point to login.officebooking.net. This is the only part in the URL that you need to change.
Save the configuration.

Identifier: https://login.officebooking.net/sso/access/[ssoID client]/metadata

Reply URL: https://login.officebooking.net/sso/access/[ssoID client]/consume

Please note: ssoID is already configured for your organisation. You don’t need to change the ssoID, just the main url.

Google SSO

Login to your Google Workspace Admin
Select Apps.
Then select ‘Web and mobile apps’
Select the Officebooking app that’s already there.
Select ‘Service provider details’
Change the Officebooking url within the ACS URL and the Entity ID. Where the url used to point to the old login service, it should now point to login.officebooking.net. This is the only part in the URL that you need to change.
Save the configuration.

ACS URL: https://login.officebooking.net/sso/access/[ssoID client]/consume

Entity ID: https://login.officebooking.net/sso/access/[ssoID client]/metadata

Please note: ssoID is already configured for your organisation. You don’t need to change the ssoID, just the main url.

Okta

Login to your Okta Admin portal
Select the Officebooking SAML Integration.
Select ‘Edit SAML Integration’.
Select the tab ‘Configure SAML’
Change the Officebooking url within the Single Sign On URL and the Audience URI (SP Entity ID). Where the url used to point to the old login service, it should now point to login.officebooking.net. This is the only part in the URL that you need to change.
Save the configuration.

Single Sign On URL: https://login.officebooking.net/sso/access/[ssoID client]/consume

Audience URI (SP Entity ID): https://login.officebooking.net/sso/access/[ssoID client]/metadata

Please note: ssoID is already configured for your organisation. You don’t need to change the ssoID, just the main url.

Go back to the OfficeAdmin portal.
Navigate to ‘Settings’ in the left menu.
Scroll down at the ‘General’ tab.
Turn on the ‘Enable proxy login’ switch.
Save your changes by selecting the ‘Save’ button.

Test by using the Test button in Azure AD or login with the web app via login.officebooking.net.

Log in by entering your email address. Please note: logging in is only possible with an e-mail address, not with any other form of username. The system determines to which organizational environment you will be referred based on the domain in the e-mail address.
Then select the ‘Sign in’ button.
You then go to a separate login page of your organization, where you log in with your own organization account.