visiblehours.com · Features
SAML and SSO for managers
VisibleHours stores one SAML connection per organization: metadata URL, issuer, signing certificate, and SSO URL, plus the ACS and Entity ID your provider needs. Test fetches that document and copies issuer and certificate when they are present. Enable the connection when operations is ready. ACS then validates a signed assertion, maps the email to a manager in that organization, and issues a session. If a live provider is not set, sample metadata is test mode. The connection tip on the SSO screen is a VisibleHours reading of your row, not a live language model. Public Search stays on this page. It will not set up SSO for your company or open the signed-in SSO screen.
- Sign in and open SSO / SAML. Ask “open sso” or “saml settings” after you are in.
- Copy Entity ID and the ACS URL for the identity provider admin.
- Paste a metadata URL, or issuer and certificate, or use the VisibleHours sample.
- Press Test. Enable. Managers use Sign in with SAML on the login page.
What this is not
- Not an identity-provider certification or security audit.
- Not a change to the Windows tray or employee invite codes.
- Not outreach. VisibleHours does not email your provider from this screen.
- Sample metadata is a VisibleHours demo IdP, not a live directory.
- Not a done-for-you setup. Public Search will not set up SSO for your company.
Public guide: SAML / SSO ACS login for managers.