Setting up SAML-SSO on Float

Security Assertion Markup Language (SAML) is a standard of communication between Identity Providers (IDP) and Service Providers (SP) like Float! 

Float allows companies to set up SAML to seamlessly onboard their employees to start spending on the platform.

Note: SAML is only available for Professional Plan Customers.

Enabling SAML-SSO

If your IDP is one of Okta, Google, or Microsoft Azure, please refer our specific resources to set up SAML-SSO. 

Important: If you are using SAML-SSO with your Float account, please ensure you have MFA disabled for your users! This will ensure users aren't required to double-authenticate to log in. You can verify this is disabled by following these steps:

1. Navigate to 'Security' in the Settings page within Float
2. Click the 'MFA' tile
3. Ensure the MFA requirement for all users to set up is toggled 'OFF'

Step 1

Navigate to the Settings Section within Float and Select Security Section within the Settings Page

Step 2

Ensure that you’ve selected SAML and not MFA (Multi-Factor Authentication) as it’s a different authentication feature.

Step 3

Add a domain you wish to be authenticated when logging in. For example:

Floats domain is floatcard.com, so the domain we’re looking to authenticate is floatcard.com. The next time someone logs into Float using firstname@floatcard.com, the domain will go through Float's SAML authentication.

Step 4

Verify your domain through your domain host. Once you've verified your domain, you will need to add the record in the steps below in order to successfully verify your domain.

Step 5

Copy the SP configuration info you'll need to enter in your IDP. The IT team will know where the configuration info should go in your IDP. 

Step 6

Based on your IDP, create (2) of the custom Float attributes required for your SAML integration to function. Note: Float does support other IDP providers outside of Google, Okta and Microsoft Azure

Step 7

Once your IT team has configured your IDP, please provide Float with the following info:

Step 8

Save your configuration and test your SAML Sign In. Please ensure that your email in Float is identical to your email in your SAML system (ie. Okta, Google or Microsoft Azure). If your email in Float is different (ie. missing your last name or using a pseudonym, you will need to ask our support team to update it to be an exact match).

Once SAML is successfully enabled, toggle to enable all employees under your domain to sign in via SAML-SSO moving forward. You'll also be able to onboard new employees via SAML-SSO by giving them access in that system. Once you grant access and they use that system to access Float, they will be created as a spender in Float automatically. If you want to assign them with higher role permissions or assign them to a specific team, you can create them as a user in Float before granting them access in your SAML system. You can also edit a user's role and team in Float at any time.