Enable SSO for Nitro PDF

Purpose

Nitro PDF offers single sign-on via SAML integration with Practice Protect. This provides a seamless login experience to the Nitro PDF platform using IdP-initiated SSO.

Practice Protect will configure this on your behalf. Please send us an email at support@practiceprotect.com

Prerequisites

• This feature is available only in the Standard and Professional plans of Nitro PDF Subscriptions.
• Active Nitro PDF account with administrator rights for your organization (Note: this can be your account so you don’t have to pay and create for another license account)
• Admin Access to Practice Protect
• Nitro PDF Username/Email for staff should match the login names in Practice Protect.

Instructions

1. Login to your Practice Protect and switch to Admin portal (ex. mydomain.practiceprotect.app)
2. On Core Services, Click on Roles > Add Roles. Create a role and set the name field to Nitro PDF SSO Users. Then Save.
3. With the created role, click on Members > Add. Add each user that will have access to the app. Then Save.
4. From the Apps & Widgets, go to Web Apps section. Then, choose Add Web Apps on the top right corner.
5. Select Custom then next to SAML click Add
6. On Settings, set name as Nitro PDF SSO and select Save. You can also set category and logo.
7. Click on Trust > under Identity Provider Configuration select Metadata. Select on Signing Certificate then Download. Keep the file as this will be needed for the next steps.
8. On Single Sign on URL, click Copy. Put it on Notepad temporarily then hit Save.
9. Go to SAML Response and click Add. Add the Attribute Name and Values as listed below:
   • employeeNumber – LoginUser.Username
   • email – LoginUser.Username
   • given_name – LoginUser.FirstName
   • family_name – LoginUser.LastName
   • emailAddress – LoginUser.Email
10. Click Save.
11. Sign in to Nitro with the Admin account. Go to Settings > Single Sign On
12. Click Setup UP SAML SSO. Paste the URL copied from Step 8 to Sign in URL field and upload the certificate downloaded from Step 7. Then, Submit.
13. From Nitro, copy both the SAML Entity ID and ACS URL.
14. Return to Practice Protect Nitro PDF SSO app > Trust > Service Provider. Click Manual Configuration.
15. Paste the values you copied from Step 13 to the relevant fields (SP Entity ID and ACS URL)
16. Set the NameID Format to emailAddress and Save.

Enable SSO for Nitro PDF

1. Return to Nitro Admin Portal > Settings > Single Sign On.
2. Tick Enable Single Sign-On. A notification will show, SSO enabled successfully
3. Return to the Nitro SSO app in Practice Protect and go to Permissions. Add the role we created in an earlier step to the permissions page (e.g. Nitro PDF SSO Users) and click Save.
4. SSO Integration is now completed. You can use the Nitro PDF tile on your Practice Protect User Portal to automatically sign in to the app.