How do I enable Single Sign-On (SSO) in Echo?

To access the Authentication control panel:

1. Open the More menu in Domain > Details.  Select Domain settings.
2. Locate the Authentication control panel. The default authentication method is "echo". This method requires users to enter a username and password.

To configure Echo to use SAML authentication:

1. In the Authentication panel, change the Type to "SAML"
2. Click Download Metadata to retrieve Echo's .xml metadata file. Use it to generate the Identity Provider (IdP) file from your authentication provider.
3. Click Add identity provider (IdP)
4. In the SAML identity provider configuration window,  provide the Login prompt. This is the label that appears on the login button of Echo's home page. Note: Echo supports multiple simultaneous SAML IdPs. This can allow different users to use different SAML authentication providers. If you have only one IdP, this defaults to Login, if you have more, you can label them appropriately.
5. Upload the idp-meta XML file. This is provided by your IdP.  
6. The Metadata resource path and Provider ID are automatically populated.
7. Click Done to add this Identity Provider.
8. See Other Configuration Options
9. Click Save in the upper menu bar to save your domain settings.

To configure Echo to use CAS authentication:

1. In the Authentication Panel, select "CAS" in the authentication Type
2. Provide the CAS Server URL.
3. Indicate if you want to Logout of CAS when logging out of Echo.
4. Indicate if you want to Echo to Open login in a new window.
5. See Other Configuration Options
6. Click Save in the upper menu bar to save your domain settings.

To use Domain authentication:

1. In the Authentication Panel, select "Domain" as the authentication Type.
2. Provide the Domain ID and your domain's users will use the selected domain's SSO configuration.
   • For example, if you configured SAML in a district domain, you can point to that school domain to use the district's SAML configuration.
3. See Other Configuration Options
4. Click Save in the upper menu bar to save your domain settings.

Echo has several other configuration options including:

1. Logout Redirect: This configuration will redirect users to the designated URL upon logging out of Echo.
2. Prevent users from using echo credentials: By default, users have the option to login using their Echo username and password even when SSO is enabled. Enabling this option will remove this option for users.
3. Allow users to create their own accounts:  By default, users are not allowed to create their own user accounts. Enabling this option will allow a user to create their own user account in Echo.
4. Indicate if you want to Prevent users from using Echo credentials.
   • If you don't select this, you have the option to Allow users to create their own accounts rather than requiring  they be created for them. You will also be able to set up your password policy.