Documentation Index
Fetch the complete documentation index at: https://docs.tryrisotto.com/llms.txt
Use this file to discover all available pages before exploring further.
Dashboard Authentication Setup
Configure Single Sign-On (SSO) for your Risotto dashboard to enable secure, seamless authentication using your organization’s existing identity provider.Prerequisites
Before configuring SSO, ensure you have:- Administrative access to your identity provider
- SSO enabled by Risotto support team
Supported Identity Providers
Okta SAML Configuration
Okta SAML Configuration
Overview
Configure SAML-based authentication using Okta Workforce Identity to allow your users to sign into the Risotto dashboard with their Okta credentials.Supported Features
The Risotto SAML integration supports the following Okta features:- SP-initiated SSO — Users sign in from the Risotto dashboard and are redirected to Okta to authenticate.
- IdP-initiated SSO — Users launch Risotto directly from their Okta End-User Dashboard.
Step 1: Request Risotto Support to Enable SSO
- Reach out to Risotto Support and request to enable Dashboard SSO via Okta.
- Risotto Support will provide your
risotto_org_id.
risotto_org_id is the unique identifier for your Risotto organization. Okta uses it to link the Risotto catalog app to your account. You enter this value when adding the app in Step 2, so keep it on hand.Step 2: Add the Risotto App from the Okta Catalog
- Sign in to your Okta Admin Console
- Navigate to Applications > Applications
- Click Browse App Catalog
- Search for Risotto and select it from the results
- Click Add Integration
- In the app’s configuration settings, enter the
risotto_org_idthat Risotto Support provided in Step 1
risotto_org_id, the Risotto catalog integration is preconfigured with all required SAML settings, attribute statements, and Name ID format. There is no other manual SAML configuration to complete — you only need to share your metadata with Risotto (see Step 4).Step 3: Assign Users and Groups
- Navigate to the Assignments tab of your Risotto app
- Click Assign > Assign to Groups or Assign to People
- Select the users/groups who should have access to Risotto
- Click Done
Step 4: Share Metadata URL with Risotto Support
- In Okta, go to the Sign On tab of your Risotto app
- Copy the Metadata URL from the SAML setup instructions
- Share the Metadata URL with the Risotto team
- Request the Risotto team to enforce SSO for your organization
Testing
Test the integration by:- Opening an incognito/private browser window
- Navigating to your Risotto dashboard
- Clicking Sign in with Okta
- Verifying successful authentication and access
Google Workspace Configuration
Google Workspace Configuration
Overview
Google Workspace offers two authentication methods for the Risotto dashboard: Sign in with Google (OAuth) for simple setups, or SAML for enterprise requirements.Option 1: Sign in with Google (Recommended)
Best for: Organizations wanting quick setup with Google OAuth- Navigate to Risotto Dashboard > Settings > Authentication
- Click Add SSO Connection
- Select Google (OAuth)
- Enter your Google Workspace domain
- Click Configure with Google
- Complete the OAuth authorization flow with a Google Workspace admin account
- Enable the connection
- Simple one-click setup
- Automatic user provisioning
- Built-in MFA support through Google
- No certificate management required
Option 2: Google SAML Configuration
Best for: Organizations requiring SAML compliance or advanced attribute mappingStep 1: Create SAML Connection in Risotto
- Navigate to Risotto Dashboard > Settings > Authentication
- Click Add SSO Connection
- Select Google (SAML)
- Enter your email domain and connection name
- Note the Single Sign-On URL and Audience URI
Step 2: Configure SAML App in Google Admin
- Sign in to your Google Admin Console
- Navigate to Apps > Web and mobile apps
- Click Add app > Add custom SAML app
- App name:
Risotto Dashboard - Description:
SSO access to Risotto IT automation platform
- Download the certificate and note the SSO URL
- ACS URL: Use Single Sign-On URL from Risotto
- Entity ID: Use Audience URI from Risotto
- Start URL: Leave blank
- Signed response: Checked
- Name ID: Basic Information > Primary email
| Google Directory attributes | App attributes |
|---|---|
| Primary email | |
| First name | firstName |
| Last name | lastName |
Step 3: Complete Configuration
- Return to Risotto dashboard
- Upload the Google SAML certificate
- Enter the Google SSO URL
- Save and enable the connection
Microsoft Entra ID Configuration
Microsoft Entra ID Configuration
Overview
Configure SAML-based authentication using Microsoft Entra ID (formerly Azure AD) to enable secure dashboard access for your organization.Step 1: Create SAML Connection in Risotto
- Navigate to Risotto Dashboard > Settings > Authentication
- Click Add SSO Connection
- Select Microsoft Entra ID (SAML)
- Enter your email domain and connection name
- Note the Single Sign-On URL and Audience URI
Step 2: Configure Enterprise Application in Entra ID
- Sign in to the Azure Portal
- Navigate to Microsoft Entra ID > Enterprise Applications
- Click New application > Create your own application
- Name it
Risotto Dashboardand select Integrate any other application
- Select SAML as the SSO method
- Click Edit in the Basic SAML Configuration section
- Identifier (Entity ID): Use Audience URI from Risotto
- Reply URL (Assertion Consumer Service URL): Use Single Sign-On URL from Risotto
- Sign on URL: Your Risotto dashboard URL
- Relay State: Leave blank
| Claim name | Source attribute |
|---|---|
emailaddress | user.mail |
givenname | user.givenname |
surname | user.surname |
Step 3: Assign Users and Groups
- Navigate to Users and groups in your Enterprise Application
- Click Add user/group
- Select users or groups that should have Risotto access
- Click Assign
Step 4: Complete Risotto Configuration
- In Azure, go to Single sign-on > SAML Certificates
- Download the Certificate (Base64)
- Copy the Login URL
- Return to Risotto dashboard configuration
- Upload the certificate and enter the Login URL
- Save and enable the connection