Setting Up Single Sign-On (SSO) for Encompass Consumer Connect Borrower Widgets

This page provides general information about setting up single sign-on for use with Encompass Consumer Connect borrower portal and loan application widgets. For more detailed information and to get started setting up SSO with borrower widgets, contact your ICE Mortgage Technology Relationship Manager.

NOTE: If you are looking for information about setting up SSO for the Encompass Consumer Connect Admin portal, see the Setting Up SSO for Encompass Products Guide.

What is Single Sign-On?

Single Sign-On is an authentication process that enables users to authenticate securely with multiple websites or applications by logging in only once with one set of credentials, a user name and password. When a user logs into an SSO website or application, a trusted identity provider verifies the user's credentials. To authenticate the user, the identity provider prompts the user to a user name and password for the website. Once the user is authenticated, the identity provider grants access to the websites and/or applications.

SSO and Encompass Consumer Connect Borrower Widgets

You can configure SSO for Encompass Consumer Connect borrower widgets for use with your third-party site. When using SSO with Encompass Consumer Connect borrower widgets, borrowers who log in to your non Encompass Consumer Connect website will be able to start a new loan application and access the borrower portal without having to log in again or create an Encompass Consumer Connect account. When the borrower logs into your website, the identity provider authenticates their credentials and grants access to your website and Encompass Consumer Connect loan application and borrower portal. In the following example, a lender's website prompts a borrower to authenticate using Okta Verify as the identity provider before granting access to the borrower portal:

Who Can Use SSO Widgets?

Encompass Consumer Connect SSO borrower widgets are for third-party sites that have a user account system already in place. Encompass Consumer Connect SSO borrower widgets can be created on any Encompass Consumer Connect instance in an SSO-enabled Encompass environment.

SSO Setup Overview

The following table describes the high-level tasks for setting up SSO:

Tasks	Notes
Contact your ICE Mortgage Technology Relationship Manager to request SSO enablement	An ICE Mortgage Technology professional services team member will enable your Encompass instance for SSO and assist you through the set up process. If you have existing Encompass Consumer Connect sites or widgets created on your Encompass instance that should not use SSO, inform professional services team member at this time.
Configure your identity provider and set up the connection in Developer Connect	An Encompass Super Administrator persona is required for this task. Your company's identity provider must be configured with ICE Mortgage Technology settings and the connection must be set up in Developer Connect before SSO can be enabled in Encompass Consumer Connect. For detailed instructions on configuring supported identity providers (Okta, Salesforce, and Microsoft Azure) and setting up the connection in Developer Connect, see Configuring an Identity Provider (IdP) for SSO Using SAML.
Enable SSO on your Encompass Consumer Connect instance	An Encompass Super Administrator persona is required for this task. After your company's identity provider is configured and the connection is set up in Developer Connect, you can enable SSO from the administration portal. See Enabling SSO on Your Encompass Consumer Connect Instance for detailed instructions.
Create, design, and publish your SSO-enabled borrower widgets	An Encompass Super Administrator persona is not required for this task. There are several configuration options in the administration portal that will help you add a loan application and/or borrower portal widget to your non-Encompass Consumer Connect site. These configuration options allow you to create SSO-enabled widgets, design the look and feel of them to match your site, and finally generate a code snippet that your developer can add to your site. See Adding SSO Borrower Widgets to Third-Party Lender Websites.