How SAML Impacts Permissions Throughout Tulip

After you start using SAML SSO in your Tulip account, the behavior of multiple features will adapt to this new authentication method.

Here is how the functionality of different features will change:

Log In / User Creation

When an operator, user or viewer attempts to log in to Tulip or the Player, they will see a screen like this:

After they click the button, they will be redirected to a SAML login modal like this:

When they log in for the first time, a new user or operator will be created in Tulip with all relevant details from their SAML account.

Automatic Log Out

Tulip supports IdP-initiated logout. So, if you want users to log out of all software services at once via a logout from your identity provider, Tulip will respond to that logout request.

Edge Devices

Please talk to your Tulip representative if you would like to use SAML in combination with I/O gateways or Edge IO.

Compatibility With Other Tulip Features

After your organization begins using the SAML integration, you will also be able to use SAML for authentication in these two features:

• Approvals on new versions of apps
• E-signatures from operators within apps