Skip to main content

HelloID

Houghton Mifflin Harcourt (HMH) SAML application setup
Introduction

This article demonstrates how to set up Houghton Mifflin Harcourt (HMH) for single sign-on. The configuration takes place in HelloID and HMH.

Requirements

  • HelloID environment

  • HMH environment

Create or import a certificate

If there is no certificate yet, you must create or import one. For this tutorial, we will create a self-signed certificate. Name it HMHSelfSigned.

Application setup
Add a generic SAML application

Add a generic SAML application, and then change the following settings.

General tab

  • Display Name

    HMH SAML (Hidden)

    Houghton_Mifflin_Harcourt__HMH__SAML_Single_Sign-On__SSO__Configuration__360017579553__2022-08-04_14-40-51.jpeg
Single Sign-On tab

  • X509 CertificateSelect the HMHSelfSigned certificate that you previously created.

    Houghton_Mifflin_Harcourt__HMH__SAML_Single_Sign-On__SSO__Configuration__360017579553__2022-08-04_14-46-46.jpeg

Click Save to add the application to HelloID.

Supplier-side configuration
Get the HelloID Metadata URL

  1. Edit the newly-added HMH SAML (Hidden) application.

  2. Right-click the Download metadata button

  3. Select Copy link address. It will resemble: https://enyoi.helloid.com/metadata/download?ApplicationGUID=e6e741f5-a469-4849-93f7-fe2e259a339f.

mceclip0.png
Configure HMH

Log in to HMH/ThinkCentral and create a new SAML connection. Use the copied HelloID metadata URL to generate a new HMH SAML URL and metadata, as well as to generate/display target URLs for your HMH applications.

Additional HelloID Application Setup

  1. Edit the HMH SAML (Hidden) application.

  2. In the generated HMH metadata, copy the value of the Location tag, and paste it into the Endpoint/ACS URL field:

    Houghton_Mifflin_Harcourt__HMH__SAML_Single_Sign-On__SSO__Configuration__360017579553__2022-08-04_14-55-51.jpeg

  3. In the generated HMH metadata, copy the value of the EntityID tag, and paste it into the Extra Audience(s) field:

    Houghton_Mifflin_Harcourt__HMH__SAML_Single_Sign-On__SSO__Configuration__360017579553__2022-08-04_14-57-27.jpeg

  4. On the General tab, enable the Hidden toggle:

    Houghton_Mifflin_Harcourt__HMH__SAML_Single_Sign-On__SSO__Configuration__360017579553__2022-08-04_15-13-09.jpeg

  5. On the Groups tab, assign the application to the appropriate groups.

    Houghton_Mifflin_Harcourt__HMH__SAML_Single_Sign-On__SSO__Configuration__360017579553__2022-08-04_15-19-14.jpeg

  6. Click Save.

Add Generic Shortcut Applications to HelloID

For each specific HMH application (e.g., ThinkCentral):

  1. Add an application shortcut.

  2. Set the Display Name to the name of the application.

  3. Set the Default Login URL to the appropriate URL, as generated in the "Configure HMH" step above.

  4. Assign the application shortcut to the appropriate groups.

Finish up

Users who have access to any of the application shortcuts will see their icons appear on their HelloID End User Dashboard. When they click on the icon, they'll be routed to the appropriate endpoint and authenticated.