Single Sign On

Terminal One supports SSO via SAML2, as well as ADFS, Okta, OneLogin, Ping7, SalesForce, SiteMinder, and SSOCircle. MediaMath uses Auth0 as a Service Provider.

In order to setup SSO with MediaMath, reach out to MediaMath Support with the following information:

  • SSO URL - The URL at the Identity Provider to which SAML authentication requests should be sent. This is often called a Single Sign-on (SSO) URL.

  • Logout URL - The URL at the Identity Provider to which SAML logout requests should be sent. This is often called a logout URL, a global logout URL or single logout URL.

  • Signing certificate - The Identity Provider will digitally sign authentication assertions and the signing certificate is needed by the Service Provider to validate the signature of the signed assertions. There should be a place to download the signing certificate from the Identity Provider. If the certificate is not in .pem or .cer format, you should convert it to one of those formats.

MediaMath will reply with a metadata file so the Identity Provider knows how to receive and respond to SAML-based authentication requests.