This guide provides instructions for creating and testing SAML SSO Integration for BlackBerry Workspaces. Security Assertion Markup Language (SAML) is an XML-based, open-standard data format for exchanging authentication and authorization of data between parties, in particular, between an identity provider and a service provider​​​​​.

Integrating BlackBerry Workspaces with a SAML based identity provider, enables your business to easily provide your users access utilizing their own familiar domain credentials.

BlackBerry Workspaces can be set in single or multi-mode authentication. In single mode, all users are directed to the same identity provider. Using multi-mode users are directed to the preferred identity provider based on their email domain. For example, domain users can be directed to your corporate identity provider and all others to BlackBerry Workspaces internal authentication (user/password or one time token). Changes to the authentication settings of your organization can be done through the BlackBerry Workspaces Advanced Configuration Tool.

The overall goal of this guide is to provide a good understanding of the integration requirements necessary for successful SAML SSO integration and testing and is divided into the following example workflows:

• Okta
• AD FS