Skip to main content
You need access to the Admin Dashboard, permission to manage integrations and access to your institution’s identity provider. SSO is shared across your organisation’s campuses. If these options are not available, ask the StudyStash team to arrange setup.
1

Open SSO setup

Open Integrations → Single Sign-On (SSO). Select Configure SSO if this is your first connection, or open the existing connection.Under Connection method, choose Microsoft Entra for a metadata URL, or XML file for a SAML metadata file from another provider.
2

Configure your identity provider

Copy the Entity ID (Audience URI) and Reply URL (ACS URL) from SAML settings into your provider’s SAML application. Use the values on your page, not values copied from a screenshot.For Microsoft, follow Set up Microsoft Entra ID. For another provider, check the claims below and give your intended users access to the application.
Use the institution email address as the NameID and email claim. Metadata import does not configure these claims in your identity provider.Optional name claims:
3

Import and submit your metadata

In Identity provider details, paste the Entra App Federation Metadata URL and select Import metadata, or upload your provider’s XML file.Review the imported details, then select Send for setup. For an existing connection, select Save changes. Importing alone does not save anything.Awaiting StudyStash means we have received your metadata and need to finish setup. Testing becomes available once this is complete.
4

Test your connection

To confirm SSO is working, select Test connection. StudyStash will watch for a successful sign-in through this connection. Complete sign-in in the new tab using an institution account that has access to the application.To ask someone else to test, select Copy test link and share it with your IT contact. If a new tab does not open, select Open sign-in.The status changes from Configured to Connected after StudyStash confirms successful access. Configured means the settings are complete; it does not confirm a successful sign-in.Test attempts expire within 10 minutes. If yours expires, select Test connection to start again.

​
Email domains

Use the Email domains tab to review and manage the institution email domains used for sign-in. This does not replace assigning users in your identity provider. For a pilot, review access scope.

​
If the test does not complete

Check that the account is assigned to the application and has the required email claim. If you still need help, contact support with the error and the time it happened. Do not send passwords.
Reimport a metadata URL or XML file, or select Edit individual fields to change the Entity ID, sign-in URL or signing certificate. Review and select Save changes, wait for StudyStash to finish setup, then test again. Importing a metadata URL is a one-time import; certificate changes need a new import and save.