Single sign-on is an authentication system that allows users to log in to several software programs within a network with the same credentials.
⚠️ Attention: BIMcollab supports Single sign-on with Azure Active Directory.
⚠️ Attention: This feature is not available on all tiers. To check if it’s included in your subscription, review the feature comparison list on the pricing page or contact your admin. If the feature isn’t available, you may need to upgrade your tier.
To configure Single Sign-On for your space, you will need the following:
Be an Administrator in BIMcollab.
An Azure Active Directory subscription.
All users who connect to the space from the BIMcollab Zoom or the BCF Managers need to have the latest versions installed (at least 5.3.29 for the BIMcollab Zoom and 5.6.49 for the BCF Managers).
❗ Warning: Older versions do not yet support this way of identification.
💡 Tip: We recommend waiting to enable this feature until all connected applications used by your users are updated.
Configure Single Sign-On as an administrator
Follow these steps to enable SSO in your BIMcollab space.
Go to the Space administration side by clicking on the gear icon
Access the Settings tab
In the Single Sign-On section, change the Default login method to Microsoft Azure
Click on Configure next to Microsoft Azure
Go to the Azure Portal, and add BIMcollab as an Enterprise application, as described in the Microsoft Help Center. Don't search the Microsoft Entra Gallery, but 'Create your own Application'.
Assign all users to the application who need access to the BIMcollab space.
Find the Manage section on the application integration page, and select 'Single sign-on'.
On the 'Select a single sign-on method' page, choose 'SAML'
Click the pencil icon for Basic SAML Configuration to edit the settings
In BIMcollab, copy the Identifier, Reply URL and Sign-on URL from the configuration window
Paste the values in the corresponding fields in the Azure Single Sign-On setup wizard.
In step 3 of the Azure setup wizard, download the Certificate (Base64), and save it on your computer
In step 4 of the Azure setup wizard, copy the Login URL
Paste the Login URL in the BIMcollab configuration window
Open the certificate you downloaded (using an application like Notepad etc.), and paste the text in the BIMcollab configuration window. In some browsers, it is also possible to drag the certificate directly into the configuration window.
Click 'Test' to validate if the login is working. A new tab will be opened in the browser in which you can log in using an Active Directory account
A successful login will take you back to the BIMcollab page, where you are notified that the test connection is successful
Click 'Enable' to enable Single Sign-On for all users in the BIMcollab space
💡 Tip: For more information on how to configure the integration in the Azure Portal, visit the Microsoft Help Center.
💡 Tip: In this guide, Azure AD SAML Toolkit is used as an example. Instead of filling in the Reply- and Sign-on URL mentioned in that article, use the values as described above.
📝 Note: Once the Single sign-on has been enabled, all users will have to log in to the space using their Active Directory account. Make sure all users which are part of your space, are also part of your Active Directory, and have the rights to login to BIMcollab. Users who are not part of your company can be added to your Azure account as guest users.
Select login method for individual users
After enabling Microsoft Azure and setting it as the default login method for your space, all users will be required to sign in using this method.
However, you can assign a different login method to individual users. This is useful, for example, when inviting external users who are not part of your organization.
In such cases, you can set their individual login method to BIMcollab login (using space account credentials):
Go to the Users tab
Find the user and click on Edit by hovering over the three dots
In the Login section, select Choose login method
Select BIMcollab login
If your space contains users with different login methods, all users will first be required to verify their email address before signing in.
Based on their assigned login method, they will then be redirected to either:
The BIMcollab login page (email and password)
Your organization’s Single Sign-On (SSO) login page
📝 Note: For some spaces, SURFconext is also available as a login method.
For other spaces this is not enabled by default, but can be activated by sending a request to [email protected].
Log in to BIMcollab with Single Sign-On as a user
When Single Sign-On is enabled for the space you are part of, you will be asked to log in using your Active Directory credentials in these cases:
When logging in to the space from a web browser.
When connecting to a project in the space from BIMcollab Zoom.
When connecting to a project in the space from a BCF Manager.