Users can login to Chargebee using Teamstack via SAML. Your users will use their Teamstack credentials when logging into Chargebee.
Features:
Chargebee (SP) initiated Single Sign On
Teamstack (IdP) initiated Single Sign On
Minimum Requirements:
Plan: Scale or Enterprise plan
Set up SSO via SAML for Chargebee
To set up SSO you first need to create a Chargebee app in Teamstack, assign it to yourself and then configure Chargebee SSO with the SAML settings from Teamstack.
Step 1: Create Chargebee app in Teamstack
Go to your Applications in Teamstack.
Click "Add Application" in the top right corner.
Search for "Chargebee" and click "Add".
Select this app to be a "SAML" app and enter your Chargebee site name (like "myCompanyName" ) and leave the "Relay State" input empty.
On your applications overview, click on the newly created Chargebee app. You will see all details about this app.
Click on "Users" and assign this app to yourself. You will need this to test that SAML is working later. You also need use the same email address in Chargebee and Teamstack.
Click on the "SAML Configurations" tab. Keep this page open, you will need these values once you configure the SAML settings in Chargebee.
Step 2: Set up SAML in Chargebee
Enter the settings from Step 1 in Chargebee. You will need either a Chargebee Scale or Enterprise plan to be able to add SAML settings to Chargebee.
To test the SAML configuration, you could add these settings to your "test" site Chargebee provides. Later, when the setup is working, you could apply the same settings to the "live" site.
Log in to Chargebee with your administrator account.
In the side bar, select "Settings" -> "Security". Under "Single Sign-On (SSO), click on "Set up"
On the next view, click on "SAML" to add a new SAML configuration.
Here, you have to enter your settings from Teamstack. Copy and paste the following values from Step 1.7:
Copy "Sign-in page URL" from Teamstack to "Login URL" in Chargebee.
Copy "Identity Provider Certificate" from Teamstack to "SAML Certificate" in Chargebee.
Click on "Confirm"
Step 3: Test
If you added the Chargebee app to yourself in Teamstack and have an account with the same email address in Chargebee, you will be able to login.
Open a new Incognito browser window for testing
Login to Teamstack, and click on the Chargebee app on your dashboard
You will be redirected to Chargebee
Note:
You can also start the login process from Chargebee by visiting https://{{youSiteName}}.chargebee.com. You will get redirected to Teamstack, where you have to login and then get redirected to Chargebee.
When you enable SAML in Chargebee, all users have to login via SAML. Admins and Owners can still login via username and password.
When you enable SAML in Chargebee, two-factor settings for users will be removed.