Celopeers and the Celonis EMS Help Space combine community with an extensive knowledge base to solve an SSO question and help customers answer succeed

Whether you’re new to Celonis or an expert, Celopeers is a great resource for getting answers to your Celonis EMS questions and connecting with following process mining and execution management professionals. When combined with the Celonis EMS Help Space, they’re the perfect resource for helping you and your organization execute at maximum capacity with Celonis.

In this article, I’m going to show you how you can use the EMS Help Space to answer one of the top five questions asked on Celopeers:

How can we manage access to our team? Is there a step-by-step guide to setting up SSO?

As Greg Zajac, manager of professional services at Celonis, points out in the post linked to above, you can find the answer to this and other frequently asked questions in the Celonis EMS Help Space.

There are three way to access Help Space, but the easiest is to:

1. Log in the Celonis EMS
2. Click on your avatar logo, which shows the first letter of your first name.
3. Click “Help Resources”

https://delivery-p141552-e1488202.adobeaemcloud.com/adobe/assets/urn:aaid:aem:c12739e2-41dc-4d9d-aed5-7c4ea1e5d8ee/as/Celonis_EMA_Help_Resources_link.png

Alternatively, once you’re logged in to EMS, you can add the text /help/ to the end of your team URL in your web browser’s address bar. An example would look something like:

https://your-team-name.realm.celonis.cloud/help/ (where the realm is us-1, us-2, eu-1, etc.)

Lastly, if you click the “?” or “Need Help” icon in the lower right-hand corner of the EMS window.

https://delivery-p141552-e1488202.adobeaemcloud.com/adobe/assets/urn:aaid:aem:6bcc95e9-7d60-4a2d-b5b4-f17b9301e2aa/as/Celonis_EMS_Need_Help_icon.png

Once you access the Celonis EMS Help Space, you can browse the help topics on the main page, use the Page Tree on the left column to find help resources on specific topics, such as data integration, process simulation, task mining, and PQL (Process Query Language). You can also use the Search box to find information related to your questions.

https://delivery-p141552-e1488202.adobeaemcloud.com/adobe/assets/urn:aaid:aem:26fcc627-b0c6-433e-a5a9-c84e03c7cb00/as/Celonis_Help_Pace_main_page.png

For example, searching for “SSO” will return over two dozen related help articles, ranging from information of how Celonis supports SSO and how to configure it using SAML (Security Assertion Markup Language) or OpenID Connect (OIDC), to setting up SSO for the multiple identity providers the Celonis supports.

The Security Assertion Markup Language (SAML) page, walks Celonis users through how to set up SAML SSO with Celonis EMS using the following step-by-step instructions:

1. Go to Team-Settings > Single Sign-On
2. Click on “Add SSO Provider” & choose “SAML”
3. Set a name for the connection
4. Optional: Disable max. Authentication Life Time validation or set to a custom value
5. Optional: Enable use of the default service provider (SP) entity identifier. Also enable this if the SAML name identifier provided by your identity provider is not a valid URI (e.g. http:// is missing)
6. Upload Metadata XML File
7. Click “Save” → this will save the new configuration but not activate it immediately for the team.

https://delivery-p141552-e1488202.adobeaemcloud.com/adobe/assets/urn:aaid:aem:df920212-1367-4e77-b50f-de2fe03eda19/as/Celonis_Help_Space_SAML_page.jpg

The article provides important tips and warnings as well, such as:

“If you change any of these settings, you need to delete the profile and recreate it.”

It also walks you through activating a new SAML SSO provider, acquiring service provider metadata, adjusting the maximum authentication Life Time validation, allowing SSO bypassing, automating user provisioning via SAML JIT (just-in-time), and managing SAML certifications.

Lastly, there’s a whole FAQs section that provides answers to frequently asked questions for SAML on Celonis EMS, such as:

• Which SAML version does EMS support?
• Which hash algorithm is used?
• What is the Relying Party IdP Endpoint Logon Type?

And if you can’t find the answer to your specific question on the Celonis EMS Help Space or in an existing Celopeers post, you can easily file a support ticket and communicate with the Celonis support team by clicking on the “Customer Support” tab at the top.

What is the Celonis EMS Help Space?

The Celonis EMS Help Space is a continuously-updated knowledge base available to all Celonis users. The Help Space contains step-by-step how-tos, information on Celonis products and solutions, and links to other Celonis support resources like the Celopeers community site and Celonis Academy online training resource.