SAML 2.0 + Nectar Single Sign-On

Enable secure, standards-based access to Nectar with SAML 2.0 single sign-on authentication.

With SAML SSO, employees can log into Nectar using their existing corporate identity provider while IT maintains centralized control over authentication and access policies.

Overview

The SAML 2.0 + Nectar Single Sign-On integration allows organizations to authenticate users through any SAML-compatible identity provider.

This integration is ideal for:

• IT teams managing enterprise authentication systems
• Organizations using identity providers like Okta, Azure AD, Ping, or ADFS
• Companies looking to reduce password fatigue and login friction
• Enterprises with strict compliance and access control requirements

By enabling SAML SSO, companies provide employees with secure, seamless access to Nectar while maintaining centralized identity governance.

How It Works

Nectar integrates with identity providers using the SAML 2.0 protocol to securely authenticate users.

What data syncs

SAML focuses on authentication and identity verification rather than HR data sync. Common identity attributes include:

• Work email address
• Display name
• Unique user identifier (NameID)
• Optional group or role claims (if configured)

Authentication method

The integration supports:

• SAML 2.0 single sign-on

Login behavior

• Employees select “Log in with SSO” on Nectar
• Authentication is redirected to the organization’s identity provider
• The IdP verifies identity and sends a secure SAML assertion back to Nectar
• Nectar validates the assertion and grants access

Access can be managed centrally through the organization’s identity provider.

Where users interact

Employees log in through Nectar’s SSO option. IT administrators configure Nectar as a SAML application within their identity provider and manage authentication policies centrally.

Key Features & Benefits

• Standards-based single sign-on with SAML 2.0
• Compatible with most enterprise identity providers
• Centralized authentication management for IT teams
• Reduced password fatigue and improved employee experience
• Support for MFA and security policies through the IdP
• Improved compliance posture with controlled access management

Setup & Implementation

Setting up SAML SSO with Nectar is straightforward for IT administrators.

High-level setup steps

1. Enable SSO within Nectar’s authentication settings
2. Configure Nectar as a SAML application in your identity provider
3. Exchange metadata (ACS URL, Entity ID, certificates)
4. Map required claims (email, NameID, etc.)
5. Test login flow and assign users or groups
6. Enable SSO for employees

Requirements

• Administrator access to your identity provider
• Nectar admin permissions
• SAML 2.0 configuration capability

Estimated setup time: 30–60 minutes

IT involvement is typically required for setup and testing.

For full instructions, visit the Help Center documentation.

Use Cases

• Allow employees to log into Nectar using corporate credentials
• Standardize authentication across SaaS applications
• Enforce MFA and secure login policies through your IdP
• Reduce password reset support tickets
• Centralize access control and offboarding through identity governance

Security & Compliance

The SAML + Nectar integration supports enterprise-grade security standards.

It includes:

• SAML 2.0 authentication with encrypted assertions (where configured)
• Centralized identity provider enforcement of MFA and access policies
• Role-based admin controls within Nectar
• Alignment with Nectar’s SOC 2 compliance standards (if applicable)

Only authorized administrators can configure or manage SSO settings.

Support & Resources

Helpful links:

• SAML Single Sign-On Help Center Article (link placeholder)
• Nectar Support Team: support@nectarhr.com
• SAML 2.0 Specification Documentation (if approved for linking)