Single Sign-On
Integration planner

Plan your SSO integration

Tell us how your firm signs in. We'll assemble your integration path.

Answer four quick questions and this planner builds the part of the integration that applies to you — how sign-in works, exactly what to send us, the attributes your assertion must carry, and what you'll get back. Skip everything you don't need.

Q1

How SP-initiated and IdP-initiated differ

We recommend SP-initiated — it's the standard SAML profile, gives stronger replay protection (each response is tied to a request we issued), deep-links cleanly to a product, and has less to keep in sync. Pick IdP-initiated if your users naturally launch everything from your own portal. The diagrams show the one real difference — who sends the first message. Choose above and this section collapses.

You InvestorCOM Your IdP 1 · Opens a product 2 · Authentication request 3 · Authenticate password · MFA 4 · Signed assertion 5 · Into the product
SP-initiated (recommended). InvestorCOM sends the first message — an authentication request — so every response is tied back to it.
You Your IdP InvestorCOM 1 · Clicks a tile (already signed in) 2 · Signed assertion + landing key 3 · Into the product
IdP-initiated. Your IdP sends the first message — an unsolicited assertion — so it must include a landing key telling us which product to open.
SP-initiatedIdP-initiated
User starts atAn InvestorCOM productYour portal
Who sends firstInvestorCOM (a request)Your IdP (an assertion)
Replay protectionStrongRelies on assertion lifetime
Per-launch configNoneA landing key each time
Deep-linkingNaturalVia the landing key

Reference

Sample SAML documents

Illustrative examples of what the SAML looks like in each flow. Values shown as {code} and the example hostnames are provided during onboarding.

Knowledge base

Questions from real integrations

Answers to the questions partners most often ask us on integration calls and emails. Search, or filter by topic.

· click a question to expand

No matches. Try a different search, or pick All — and if your question isn't here, your InvestorCOM contact is happy to help.