Information for administrators
Good to know

Setting up SSO and member settingsSetting up SSO and member settings

‍‍

Follow the steps to set up the SSO connection by filling in the required fields with your SSO provider information. For detailed instructions on SAML2 SSO integration, please read the manual entry on configuration via Microsoft Entra IDMicrosoft Entra ID or ADFSADFS.Follow the steps to set up your SSO connection by filling in the required fields with your SSO provider information. For detailed instructions on SAML2 SSO integration, please read the manual entry on configuring via or .

‍‍

You can set a global redirect destination for members after a successful login. In the "Login options" dropdown (1a)(1a), select from "Show link to app and web app," "Direct redirect to chat.nele.ai," "Show link to app," or "Show link to web app only."You can set a global redirect here for where members should be sent after a successful login. To do this, select from the "Login Options" dropdown menu: "Show link to app and web app," "Direct redirect to chat.nele.ai," "Show link to app," or "Show link to web app only."

‍‍

You have three options for configuring your SSO settings (1b)(1b). Please choose from the following:You have three options below to configure your SSO settings . Please choose from the following:

‍‍

Manual configurationManual configuration

Enter the appropriate values into the corresponding fields below.Enter the appropriate values into the corresponding fields below.

‍‍

Configuration via Metadata XML fileConfigure via Metadata XML file

Import values via an external file.Import values via an external file.

‍‍

Configuration via Metadata XML URLConfigure via Metadata XML URL

Recommended configuration type, as it allows your data to be updated even after the validity period has expired.Recommended configuration type, as this allows your data to be updated even after the validity period has expired.

‍‍

You can copy the login URL (1c)(1c) using the icon next to the input field and share it with your company members. Team members can use this URL to log in to their nele.ai accounts via SSO in the future.You can copy the login URL using the icon next to the input field and share it with your company's members. Team members can use this URL to log in to their nele.ai accounts via SSO in the future.

‍‍

Once the general SSO setup is complete, you can define member settings, known as presets (2)(2). These include their language (2a)(2a), assigned groups (2b)(2b), assigned knowledge bases (2c)(2c), assigned AI models (2d)(2d), assigned custom AI models (2e)(2e), assigned content filters (2f)(2f), assigned custom content filters (2g)(2g), and the monthly credit limit (2h)(2h) to be made available.Once the general SSO setup is complete, you can define member settings, known as defaults . These include their language , assigned groups , assigned knowledge bases , assigned AI models , assigned custom AI models , assigned content filters , assigned custom content filters , and the monthly credit limit to be made available.

‍‍

These are the default settings that members are automatically assigned when they log in to nele.ai for the first time via SSO links.These are the default settings that members are automatically assigned when they log in to nele.ai for the first time via SSO links.

‍‍

Additionally, various SAML2 groups can be created in the SSO section, which are then assigned directly to members upon login via the specified SAML2 connection (4)(4).Additionally, you can create various SAML2 groups in the SSO section, which are then assigned directly to members upon login via the specified SAML2 connection .

‍‍

Finally, click "Save" (3)(3) to enable access to nele.ai via SSO or to save your member settings.Finally, click "Save" to enable access to nele.ai via SSO or to save your member settings.

Adjusting member settingsAdjusting user settings

You can adjust member settings in the SSO section at any time. If you change one or more of your previously set values, you will have the following additional configuration option:You can adjust member settings in the SSO section at any time. If you change one or more of your previously set values, you will have the following additional option:

‍‍

After clicking the save button, an overlay will list the adjustments you have made. Select the checkbox to the left of the respective entries to apply your adjustments globally to all existing and future members. If the checkbox is left empty, your adjustment will only be applied to future members, not to existing ones.After clicking the save button, an overlay will list the adjustments you have made. Select the checkbox to the left of the respective entries to apply your changes globally to all existing and future members. If the checkbox is left empty, your adjustment will only apply to future members, not existing ones.

‍‍

Please note that you need both SSO and member management rights to use this feature. If you only have SSO rights, adjustments to member settings will only apply to future members, not existing ones, and the described overlay will not appear.Please note that you need both SSO and member management permissions to use this feature. If you only have SSO permissions, adjustments to member settings will only apply to future members, not existing ones, and the overlay described will not appear.

‍‍

Further individual settings for existing members can be adjusted at any time at https://manage.nele.ai/usershttps://manage.nele.ai/users.Further individual settings for existing members can be adjusted at any time at .

‍‍

Finally, click "Assign to all members" to apply your changes.Click "Assign to all members" to apply your changes.

Configure SAML2 group assignmentsConfigure SAML2 group assignments

In the SSO section, you can create various SAML2 groups, which are then assigned directly to members upon login via the specified SAML2 connection.In the SSO section, you can create various SAML2 groups, which will then be directly assigned to members upon login via the specified SAML2 connection.

‍‍

Click "Assign SAML2 groups" (4)(4) to open the group assignment overlay. Here, you can map existing SAML2 groups to nele.ai groups.Click "Assign SAML2 groups" to open the group assignment overlay. Here, you can map existing SAML2 groups to nele.ai groups.

‍‍

In the "SAML2 Group" input field (4a)(4a), enter the name of the SAML2 group exactly as it is transmitted by your Identity Provider. In the "nele.ai target groups" dropdown menu (4b)(4b), select the corresponding target group in nele.ai to which members should be automatically assigned.In the "SAML2 Group" input field , enter the name of the SAML2 group exactly as it is transmitted by your Identity Provider. In the "nele.ai target groups" dropdown menu , select the corresponding target group in nele.ai to which members should be automatically assigned.

‍‍

You can add further group assignments by clicking "Create new assignment" (4c)(4c). Existing assignments can be removed using the trash icon (4d)(4d).You can add further group assignments using "Create new assignment" . Existing assignments can be removed using the trash icon .

‍‍

Finally, click "Save" (4e)(4e) to activate your group assignments.Finally, click "Save" to activate your group assignments.

Check SAML2 group assignmentsCheck SAML2 group assignments

To ensure that your SAML2 configuration is set up correctly and that group information is being transmitted by your Identity Provider as intended, you can use the "Check SAML2 Groups" button (5)(5). This opens a debug overlay that shows you which groups are currently being recognized by your Identity Provider.To ensure that your SAML2 configuration is set up correctly and that group information is being transmitted by your Identity Provider as expected, you can use the "Check SAML2 Groups" button . This opens a debug overlay that shows you which groups are currently recognized by your Identity Provider.

‍‍

At the top of the overlay (5a)(5a), you will see the title "Identity Provider Groups (for debug purposes)". Below this, the current status of the detected groups is displayed (5b)(5b) – if no successful group transfer has occurred yet, the message "No Identity Provider groups available" will appear here. As soon as your SAML2 connection is correctly configured and group data is transmitted, this area will list the actually detected groups instead.In the upper area of the overlay , you will see the title "Identity Provider Groups (for debugging purposes)." Below this, the current status of the detected groups is displayed – if no successful group transfer has occurred yet, the message "No Identity Provider groups available" will appear here. As soon as your SAML2 connection is correctly configured and group data is being transmitted, this area will list the actually detected groups instead.

‍‍

The explanatory text (5c)(5c) notes that the displayed groups correspond to the last successful login and that changes to group memberships only take effect after a new login. You can access detailed installation instructions via the linked note within the overlay.The explanatory text notes that the displayed groups correspond to the last successful login and that changes to group memberships only take effect after logging in again. You can access detailed installation instructions via the linked note within the overlay.

‍‍

You can close the overlay by clicking the close icon (5d)(5d) in the top right corner.You can close the overlay using the close icon in the top right corner.