Custodian Portal Authentication Provider

The Custodian Portal Authentication Provider is a connection between Relativity Legal Hold and an organization's single sign-on (SSO) provider that confirms the client, URL, and claim type before letting the custodian into the portal.

Note: Legal Hold Portal SSO authentication only supports OpenID Connect protocol with Implicit Flow (SAML is not supported).

Enabling Custodian Portal SSO

Enable SSO for the Custodian Portal by navigating to the Custodian Portal Authentication Provider tab. In the Authentication Provider section, fill out the fields. If you use Azure AD Provider, see Integrating Azure AD for Importing Custodians.

In the Custodian Portal Authentication Provider tab,

  1. Click Edit.
  2. Enter in information in the Authentication Provider fields. For more information, see Authentication Provider fields.
  3. Click Save.

Authentication Provider fields

  • Name—enter the name of the application.
  • Client ID—enter the organization's security and compliance identifier.
  • Authority URL—enter the authenticated provided by organization's SSO provider. If login successful, Relativity redirects to the next Redirect URL which is typically a Relativity URL and is the Custodian Portal.
  • Redirect URL—enter the URL of the Custodian Portal that Relativity will redirect the user to after a successful login. This URL is typically a Relativity URL.
  • Subject Claim Type—enter the piece of information that the SSO provider confirms the custodian by a field.
  • Claim ID Verification Field—select the value to be used to match value coming in selected Subject Claim Type.
  • Enabled—select Yes to enable or No to disable the Custodian Portal SSO.

When the Custodian Portal Authentication provider is enabled, custodians are presented with your organization’s SSO provider login after clicking the portal link in the received hold notice communication email. If the portal recognizes that the custodian has not been authenticated, they will be redirected to their organizations sign on page. Upon successful entry of their SSO credentials, they will be redirected to the custodian portal.