Skip to main content

HelloID

Application shortcuts

2022-10-10_13-23-55.jpg

An application shortcut appears alongside Applications for users on the user dashboard, but goes directly to a URL without sending any SSO data.

To get started, Add an application shortcut.

Use cases for application shortcuts

In some cases, an SP-initiated HelloID SAML application can enter an infinite redirect loop. For example, this may occur when an app points to www.acme.com/saml, which then sends an SP-initiated authentication request back to the HelloID application URL, which then contacts www.acme.com/saml, ad infinitum.

You can solve this as follows:

  1. On the Applications tab of the user dashboard, right-click the affected SAML application to retrieve its URL.

  2. Hide the affected SAML application by enabling its Hide Application toggle.

  3. Add an application shortcut whose Default Login URL is set to www.acme.com. In this case, www.acme.com must independently send an SP-initiated authentication request to the hidden SAML app's URL, which you retrieved in step (1).

In this way, the hidden SAML app is indirectly triggered to send the necessary information to www.acme.com/saml. Once the authentication request has finished, the user is redirected to www.acme.com by the application shortcut's Default Login URL. An endless loop is avoided.

Some SAML and OIDC applications have both test and production environments. Typically they share the same SSO settings, and whenever the production environment's SSO settings are updated on the SP side, they are automatically copied to (i.e., overwritten in) the test environment. In this case, having separate HelloID applications for the test and production environments will require you to update both applications any time the SSO settings change on the SP side.

You can avoid this duplication of effort by adding the production environment as a normal HelloID application, but adding the corresponding test environment as a shortcut. In this way, you won't have to separately update two applications.

Some applications have several sub-applications, or "endpoints". Instead of sending users directly to the main application, you can hide it and instead create separate shortcuts for each endpoint that goes to an SP-initiated URL. In this way, each shortcut will be (indirectly) routed through the hidden application, which stores a single set of application options and a single mapping set.

In certain situations involving application shortcuts, you may want to hide installation reminders for the Browser plugin. Do so by enabling the Hide Plugin Not Installed Warning toggle in Company settings.