Propagate Parent Organization Single Sign-On (SSO) Settings to Sub-Organizations

Parent organizations can enable their sub-organizations to use the same SSO SAML metadata and settings as the parent organization. Once an Organization Admin from the parent organization has added the metadata and set up their SAML settings, they can enable a setting that allows the Organization Admins in the sub-organizations to use the same metadata and settings.

This means that clients who leverage sub-organizations can manage all SSO through the parent organization SSO settings. 

To learn about how to set up SSO for the parent organization, see our Organization Admin: Single Sign-On article.

How it works

Propagating the SSO SAML metadata and settings to sub-organizations from the parent organization requires an update in both the parent organization and in any sub-organization that wants to use the same SSO settings:

• An Organization Admin for the parent organization needs to switch on a setting in the parent organization home to enable the setting in the sub-organizations
• An Organization Admin for the sub-organization needs to switch on a complementary setting in the organization home of the sub-organization

Once both a parent and sub-organization have switched on the setting, then members of the sub-organization will log into Everlaw using the same SSO setup as members of the parent organization.

Parent organization setup

Required permission: Organization Admin for the parent organization

Enable the setting in the parent organization:

1. To access the setting in the parent organization, go to Organization home > Projects & Users > Security settings. Make sure you are in the parent organization.
2. Under SAML Single Sign-on is the Allow sub-organizations to use parent organization's SAML metadata and SAML settings setting.
   
   This setting makes it possible for Organization Admins in sub-organizations to use the same SSO settings as the parent organization.
3. To enable it, switch it on. 
   Once it is switched on, Organization Admins in each sub-organization can switch on the complementary setting in the sub-organization home. 

Sub-organization setup 

Required permission: Organization Admin for the sub-organization

To propagate parent organization SAML metadata and settings to a sub-organization:

1. To access the setting in the sub-organization, go to Organization home > Projects & Users > Security settings. Make sure that you are in the sub-organization.
2. If the Organization Admin for the parent org has already switched on the setting described above, there is a Use parent org's SAML metadata and SAML settings toggle in the SAML Single Sign-on section. 
   
3. To enable this setting, switch on the toggle. When you do so:
   • The SAML metadata from the parent organization is propagated to the sub-organization
   • The  parent organization's settings for SSO at login are propagated to the sub organization. This includes:
     • Whether SSO is Off, Required, or Optional
     • Whether or not authenticated users can bypass Everlaw multi-factor authentication