Eventscribe Scorecard Single Sign-on

Overview 

The Scorecard single sign-on (SSO) option is available only for submitters and reviewers. SSO does not apply to authors added through the Author Task. Authors will instead receive an invitation link and log in directly to Scorecard.

Cadmium supports Service Provider (SP)–initiated SSO integrations, meaning Cadmium handles the development required to connect with a customer’s third-party system. Customers should confirm with their third-party provider whether any fees apply for API access or integration. 

Cadmium can typically support integrations using OIDC or SAML 2.0. When integrating with an external system that is new to Cadmium, the third-party provider must supply technical documentation and a technical contact. Cadmium will conduct a feasibility analysis before proceeding. Please contact your Cadmium sales representative with any questions. 

Description 

User accounts originate in the Identity Provider (IdP), which serves as the system of record (for example, an AMS, CRM, or other system). Users must already have an account in the IdP to log in via SSO. When SSO is enabled, users cannot create an account directly in Scorecard. If account creation is required, it should be handled within the IdP login experience. 

Submitter User Experience 

1. The user navigates to the Scorecard submitter login page (clients typically add introductory text to this page).
2. The user clicks Login and is redirected to the IdP login page. 
3. The user enters their login credentials. 
4. The IdP validates the credentials and sends an authentication token to Scorecard. I
5. f authentication is successful: 
   • The user is redirected to the Scorecard submitter landing page. 
     • If this is the user’s first login, a Scorecard user account is created. 
     • If the user has logged in previously, their profile fields are updated as applicable. 
   • If authentication is unsuccessful, an error message is displayed. 

Reviewer User Experience 

Prerequisites

Before logging in, the reviewer must: 

• Exist in Scorecard with the Reviewer flag enabled, and 
• Have a Member ID populated in their profile. 

Your Scorecard project manager can assist with importing reviewers with Member IDs or provide a worksheet for bulk updates. 

Reviewer Login Flow 

1. The user navigates to the Scorecard reviewer login page (clients typically add introductory text to this page).
2. The user clicks Login and is redirected to the IdP login page. 
3. The user enters their login credentials. 
4. The IdP validates the credentials and sends an authentication token to Scorecard. 
5. If authentication is unsuccessful, an error message is displayed. 
6. Scorecard checks the reviewer list for a matching Member ID: 
   • If a matching reviewer exists, the user is redirected to the Scorecard reviewer landing page and their profile fields are updated as applicable. 
   • If no matching reviewer is found, an error message is displayed.

Field Mapping

Scorecard uses field mapping to associate user data received from the Identity Provider (IdP) with corresponding user profile fields in Scorecard. The fields listed below represent Cadmium’s standard SSO field mappings. Actual field availability and naming may vary by IdP. 

• member_id (required)
• member_status 
• first_name 
• middle_name 
• last_name 
• prefix 
• suffix 
• credentials 
• pronouns 
• email (required)
• phone_work 
• phone_mobile 
• organization 
• organization_position 
• address1 
• address2 
• address3 
• city 
• state 
• postal_code 
• country

Troubleshooting 

• First, confirm the user is logging in with the IdP account that matches the Member ID assigned in their Scorecard reviewer profile. 
• If the issue persists, submit a ticket to integrationservices@gocadmium.com including: 
  • Username 
  • Error message encountered 

For security purposes during troubleshooting, request that the user temporarily reset their password to Test123 so they do not need to share their actual password.