Before beginning the SAML SSO setup process, it is crucial to ensure your organization meets the necessary requirements. Specifically, your school must have a centralized IT team capable of managing identity providers (IdPs) such as Okta, Azure Active Directory (Azure AD), or Google Workspace. Your team will handle the configuration and management of identity provider settings to facilitate the integration.

Tassel’s SAML SSO implementation supports SHA-256 hashing for Assertion signing. However, it is important to note that Tassel does not support provisioning new student accounts through SAML. This means that student accounts must be created and managed independently of the SSO system.

Administrative users cannot log in via SAML SSO. Instead, they must continue using traditional usernames and passwords to access their accounts via app.tassel.com.