SSO Setup Instructions for Adding Doximity on Duo

This article provides step-by-step instructions for configuring Single Sign-On (SSO) and automated user provisioning for Doximity through the Duo Admin Panel.

The setup process consists of two sections:

  1. SSO Configuration: Configure Doximity as a SAML Service Provider.
  2. Provisioning Configuration: Configure automated user provisioning using SCIM.

SSO Configuration

Step 1: Configure the Doximity Application

  1. Log in to the Duo Admin Panel.
  2. Navigate to Applications and open the Doximity application.
  3. Configure the application settings as shown below:

Step 2: Retrieve the Metadata URL

  1. Locate the Metadata section.
  2. Find the Metadata URL and click Copy.
  3. Provide the copied URL to your Doximity technical resource.

Step 3: Configure the Service Provider Settings

Under Service Provider, configure the settings shown below:

IMPORTANT: The Assertion Consumer Service (ACS) URL is unique to your organization and will be provided by your Doximity technical resource.

For your convenience, the following URLs are also provided as copyable text:

Entity ID:

https://sso-connect.doximity.com

Assertion Consumer Service (ACS) URL:

https://sso-connect.doximity.com/auth/saml/organization_identifier

NOTE: The Single Logout URL, Service Provider Logout URL, and Default Relay State fields are optional and may be left blank

Step 4: Configure the SAML Response

Under SAML Response, configure the settings shown below:

  • NameID format: urn:oasis:names:tc:SAML:1.1:nameid-format.email/Address
  • NameID attribute: <Email Address>
  • Signature Algorithm: SHA526
  • Signing Options: Select both Sign response and Sign assertion.

Optional — SAML Assertion Encryption

Doximity supports SAML Assertion encryption. 

If you wish to enable this feature, please work with your Doximity technical resource to obtain the required certificate.

Step 5: Configure the SAML Attribute Mappings

Under Attributes, configure the mappings shown below:

NOTE: The following fields can be left blank:

  • Create Attributes
  • Role Attributes
  • Attribute Transformations

Step 6: Configure Universal Prompt and Policy

Configure the Universal Prompt and Policy sections according to your organization's requirements and the settings used for similar applications.

Provisioning Configuration

Step 1: Access Provisioning Settings

In the Duo Admin Panel, navigate to Provisioning.

Step 2: Configure Provisioning Authentication

Under Authentication, configure the settings shown below:

For your convenience, here is the SCIM Base URL as copyable text:

https://sso-connect.doximity.com/scim_v2

IMPORTANT: Please work with your Doximity technical resource to obtain the provisioning token through a secure method

Step 3: Validate the Connection

  1. Click Connect to application.
  2. Confirm that the connection is successful before proceeding.

Step 4: Configure Provisioning Attribute Mapping

Under Attribute Mapping, configure the mapping shown below:

Step 5: Enable Provisioning

Click Save and Enable to save your configuration and activate provisioning.

Additional Resources

For more information about configuring Duo Single Sign-On and automated provisioning, please refer to the following resources: