Airtable

Ironchip acts as the SAML 2.0 identity provider for Airtable. This guide explains how to register Ironchip as an SSO identity provider in the Airtable admin panel.

Requirements

• Access to the Ironchip admin console.
• An Airtable Enterprise account with access to the Admin panel.

Configure Ironchip

Before you add the SSO metadata (sign-in URL and x509 certificate) in Airtable, you need to get it from Ironchip.

1. In the Ironchip admin console, create a SAML application. See Applications and SAML for the steps.
2. Download the Ironchip metadata with Download metadata file when you create the application. The document contains the sign-in URL and the certificate.
3. Add to the application the users who will authenticate with it.

Configure Airtable

1. Sign in to Airtable.

2. Click your user icon and select Admin.

3. In the left sidebar, go to Settings and open the SSO & Authentication tab (Security & Authentication).

4. In the SSO configuration section, click Add SSO identity provider. A configuration window opens.

5. Choose the domain this SSO configuration maps to. The drop-down lists all the domains associated with your Enterprise account.

   Note

   If you expect to see other domains in the list, contact your Airtable account representative to make the necessary changes.

6. Fill in the fields with the Ironchip metadata:

   • Sign-in URL: the one in the document you downloaded from the Ironchip admin console.
   • x.509 certificate: paste the certificate from that same document.
   • Metadata version: select v2. Partner integrations use the default V2 option.

7. Click Save. A pop-up asks you to confirm. Click Save again.

Changes may take a few minutes to appear. After you save, the Settings page reloads. From that tab you can also click Edit metadata if you need to change it later or delete the configuration altogether.

Verify the integration

Before you require SSO for your own email domain, check that the metadata you provided is correct:

1. Sign out of Airtable and sign back in with SSO.
2. If sign-in works, go back to the SSO & Authentication tab.
3. Toggle the switch under SSO optional/required to sign out all users of the configured domain and enforce SSO.