SSO Into the ASP Exhibitor Zone – ASP Knowledge Base

Please note that this article relates to ASP's EZone 2 product, not the EZone Classic. Please ask support@asp.events if you are unsure which one you are using.

Introducing Seamless Access to Your Exhibitor Zone!

We've made it even easier for exhibitors to access your Ezone with our new Single Sign-On (SSO) feature. This allows exhibitors to log in directly using a secure, unique web address, eliminating the need for separate login credentials in many cases. Typically this will be used for SSO from an exhibitor manual, registration, or app platform. However, it can be used anywhere you see fit!

How it Works:

Think of it like a special key that unlocks your Ezone instantly. This key is embedded within a unique web link that you can generate directly within another platform. Clicking this link will securely verify access and take your exhibitors straight to your Ezone.

Key Benefits:

Simplified Access: No need for exhibitors remember another username and password for your Ezone if their journeys start elsewhere.
Faster Login: Exhibitors get straight to your Ezone with a single click.
Secure: The unique link contains encrypted information, ensuring a safe and reliable login process.

What You Need to Know:

Initial Setup (Done by Us): Before you can generate an SSO link for your Ezone, we need to enable it within our ShowOff system. This is a one-time setup process where we activate the SSO feature, for security reasons, we'll also generate a unique "secret key" for your Ezone and let you know what it is. Alternatively, you can provide us with the secret key. This key will then be used within the JWT, details below.
Your Unique SSO Link: You can then generate a special web address (URL) that looks something like this:
```
https://[Your Website Address]/__zone/sso?jwt=[Secure Exhibitor JWT]
```
- [Your Website Address] will be the specific web address for your event.
- [Secure Exhibitor JWT]will be a long string of letters and numbers after jwt= and is in the form of a JWT (JSON Web Token). Treat this like a password and do not share it publicly.
How the Secure Exhibitor JWT should be Created (Technical Detail): The JWT should be signed using the "secret key" we mentioned earlier. It is unique to each exhibitor, and essentially contains information that verifies who your exhibitor is. This information can be as simple as their account number, or it can include more specific details like the contact name and email address if you want them to log in as a particular contact.
- Logging in with just an Account Number: This will log the exhibitor in as the main contact associated with your account. The JWT in this case will contain just the exhibitor account number (e.g., {"accountnumber": "EXHIB123"}).
- Logging in as a Specific Contact: If accessing the Ezone as a specific contact, the JWT will contain more details including the exhibitor title, contact email address, first name, and last name (e.g., {"accountnumber": "EXHIB123", "title": "Secure Login Co.", "contactEmail": "joe.bloggs@securelogin.co", "contactFirstname": "Joe", "contactLastname": "Bloggs"}).

Example in Action:

Let's say your unique website address is https://theSSOshow.com and you've generated a secure login code for a contact named Joe Blogs at "Secure Login Co.". Your SSO link might look like this:

https://theSSOshow.com/__zone/sso?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhY2NvdW50bnVtYmVyIjoiRVhISUIxMjMiLCJ0aXRsZSI6IlNlY3VyZSBMb2dpbiBDby4iLCJjb250YWN0RW1haWwiOiJqb2UuYmxvZ2dzQHNlY3VyZWxvZ2luLmNvIiwiY29udGFjdEZpcnN0bmFtZSI6IkpvZSIsImNvbnRhY3RMYXN0bmFtZSI6IkJsb2dncyJ9.VUm9z4bu4VcPnEeVO9A3Niu9W86QbXrTwOZ7IJTYYcM

Simply clicking on this link will automatically log you into the Ezone for the SSO Show as Joe Bloggs from the exhibitor "Secure Login Co."

We believe this new Single Sign-On feature will significantly streamline your exhibitors access to the Ezone platform. If you have any questions or need assistance generating your unique SSO link, please don't hesitate to contact us.