Map your organization’s roles to Coconut roles by configuring role mapping.

NOTE: Single Sign-On is an add-on feature. Please connect with your Customer Success Manager to get started.

To configure role mapping, roles will need to be mapped in Coconut and configured in your organization’s IDP.

Configure role mapping for your organization's roles by expanding User Role Mapping in your SSO Configuration

Additional configuration may be required based on your IDP. For example, if using Entra ID, a relay state for each role ID needs to be included in the enterprise application in Entra ID.

For more information, please refer to your organization’s IDP’s documentation:

In this example, your organization uses Entra ID. You have a role at your organization for Team Lead that you want to map to Coconut’s Staff Advanced role.

In Entra ID, someone at your organization with admin access creates an additional claim using the following details:

Then, in Coconut, an admin user completes the following role mapping in Settings>Integrations & API>SSO>User Role Mapping:

In this example, your organization uses Entra ID. You have a role at your organization for Team Lead (role ID = Team_Lead) that you want to map to Coconut’s Staff Advanced role.

In Coconut, an admin user completes the following role mapping in Settings>Integrations & API>SSO>User Role Mapping:

In Entra ID, someone at your organization with admin access to Entra ID updates the SAML User Profile for Team_Lead to include a relay state. The relay state value = Team_Lead.

Once these actions are completed, the staff’s profile settings in Coconut will include the following details:

Admin users can access Settings and configure role mappings.