Thank you for partnering with Pave to set up Single Sign-On for your organization. This guide will walk your IT team through the configuration process.

Thank you for partnering with Pave to set up Single Sign-On for your organization. This guide will walk your IT team through the configuration process.

## What You'll Need to Provide

Before we can complete your SSO setup, we'll need the following information from your Identity Provider (IdP):


1. **X509 Signing Certificate** (in .cert format)
2. **Sign-In URL** (also called SSO URL or Login URL)

## What Pave Will Provide to You

Once we receive your information, we'll provide you with:


1. **Entity ID**: `urn:auth0:pave-production:<connectionname>`
2. **ACS URL** (Assertion Consumer Service URL): `https://auth.pave.com/login/callback?connection=<connectionname>`


:::info
*Note: The* `_<connectionname>_` *will be specific to your organization*

:::

## Configuration Steps in Your Identity Provider

### 1. Create a New SAML Tile

In your IdP (Okta, Azure AD, OneLogin, Rippling, JumpCloud, etc.):

* Create a new SAML 2.0 application for Pave
* Use the **Entity ID** and **ACS URL** that Pave provides

### 2. Configure Attribute Mapping

Your IdP needs to send the following user attributes to Pave:

| Pave Requires | Map From Your IdP |
|:---:|:---:|
| First Name | `firstName` or `givenname` |
| Last Name | `lastName` or `surname` |
| Email Address | `email` or `emailaddress` |
| Email Verified | `nameidentifier` |


:::info
*Note: Attribute mapping is case-sensitive*

:::

### 3. Assign Users

* Assign the appropriate users or groups to the Pave application in your IdP
* Users must be assigned to the application before they can access Pave via SSO

### 4. Export Configuration

Once configured, export or copy:

* Your **X509 Signing Certificate**
* Your **Sign-In URL**

Send these to your Pave contact.

## Testing Your SSO Connection

After Pave completes the configuration on our end:


1. Navigate to your Pave login page
2. Click the "Single Sign On" button
3. You should be redirected to your company's login page
4. After authenticating, you'll be returned to Pave

## Troubleshooting Common Issues

**"Verify Your Email" page appears**

* This usually means attribute mapping is incomplete. Double-check that email attributes are correctly mapped.

**403 Error**

* The user hasn't been assigned to the Pave application in your IdP. Please assign them and try again.

**"Page Not Found" error**

* The Sign-In URL may be incorrect. Ensure you're using the correct SSO URL for your IdP.

**General login issues**

* Try clearing your browser cache and cookies
* Close all browser windows where you're logged into Pave
* Attempt to log in again

## Need Help?

If you encounter any issues during setup, please reach out to [support@pave.com](mailto:support@pave.com) with:

* Screenshots of any error messages
* The email address of the user attempting to log in
* Your IdP type (Okta, Azure AD, etc.)

  




SSO Configuration Guide

Custom Role Creation Guide

Logging In

Creating an Account

How to add a colleague to Pave’s Market Data Platform

Market Data Role Management

Why does it matter to get levels and role families right?

Account Setup

Contact Us

How much does Pave Market Data access cost?

How does Pave Work?

Intro to Pave

Pave 101

Compensation Philosophy

Total Compensation

Compensation 101

The Stock Option Lifecycle

ISO Tax Implications

The Basics of Stock Options

The Confusing AMT (Alternative Minimum Tax)

ISO Strategies

An Overview of How Stock Options Work

Equity 101

How to Benchmark Executive Compensation

Account Creation Troubleshooting and FAQs

Login Troubleshooting and FAQ

How does company size affect which department, job family and job level I should choose?

How does Pave determine a role level and role family?

What are Job Levels, Departments and Job Families? Why are they important?

Troubleshooting Rippling Zero Records Error

What Market Data Connections does Pave currently support?

FAQs

Getting Started

Market Data Connections Set up

Market Data Connections Overview

Integrations 101

Integrations

Adding Columns

Team View Overview

Team View Column Configuration

Team View Customizations

Re-ordering Columns

Deleting Columns

Team View Settings

Team View

Comp Planner Configurations Overview

Compensation Planner 101

Getting Started - Compensation Planner

Compensation Planner FAQs

Cycle Specific Permissions

Employee Eligibility

Step 1: Initial Cycle Setup

First-Class Columns

Using Handlebars Formula for Calculated Columns

Columns

Step 2: Column Configuration

OTE Planning Configuration Guide

What is OTE Planning?

Step 3: OTE Planning

Am I able to update or change approval chains during a cycle?

Updating Approval Chains

Compensation Cycle Data Upload

Step 4: Data Management

How can I configure market adjustment recommendations for employees?

How can I configure variable raise recommendations for employees?

Recommendation Logic

What are Recommendations?

Step 5: Recommendation Logic

Budgets

Budget Dashboard

Top Down Budgets: In-app Configurations

Step 6: Budget Confirmation

Planning Windows Setup Guide

Planning Windows Overview

Monthly & Hourly Pay

Employee Compensation History Popout

UI Toggles

Filtering & Sorting

Approval Statuses

Step 7: Planner Experience

Smart Flags

Compensation Outliers

Manager Compression Flag

Vesting Drop Flag

Step 8: Controls & Governance

Peers Overview

Cycle Outcomes

Value Rounding in Compensation Planning

In App Reward Letter Editor

Reward Letters

Peers Configuration Guide

Cycle Progress Dashboard Overview

Other Cycle Actions

 Compensation Planner

Survey aging

Edit and apply benchmarks

Set weights and logic

Map data sources to jobs

Supported survey providers

Manage Pave data sources

Manage survey data sources

Benchmarks overview

Step 2: Benchmarking

Band Sets

Pay Types: Calculated TDC, Annual Equity, and Refresh Equity

Manually Create New Band Sets

Bands Set Audit Log

How to duplicate band sets

Managing & Reordering Calculated Columns

Calculated Columns

Unmatched Employees

Upload/Download Bands

View changes

Editing Bands

Employee Distribution in Bands

Pay Zone Manager

Job Architecture 101

Grades

Setting up Company Job Architecture

Company Job Architecture

Step 1: Build Foundation

Generate Bands from Market Data

Bulk & Manually Associate Market Data to Bands

Step 3: Update Ranges

Relative Permissions

Generate Bands for New Jobs in Your Job Architecture

Compare Bands

Advanced Filters

Ongoing Management & Analysis

Market Pricing

Option Driver Deprecation FAQs

Option Driver

Option Impact Deprecation FAQs

Option Impact

Option Impact & Option Driver

Executive Reporting Dashboard

Cycle Monitoring and Reporting

Building Market-Based Compensation Bands

Employee Groups

Cycle Configuration

How does Recommendation Logic work?

Am I able to change another user’s permissions or login credentials while impersonating?

Can I impersonate another user in one page while having other Pave tabs open?

Can a user have more than one role at a time?

How do I know if I’m impersonating someone else?

Can I act on another’s behalf while impersonating them?

Who is able to impersonate?

Who can I impersonate?

How do I impersonate a user?

What is Impersonation?

How can I view Pave as another role?

How do I add multiple users to a role at once?

How can I change the permission settings for a role?

How can I create a new role?

Permissions & Settings FAQs

Role Management

Impersonation as a Pave Admin

Auto-manager Assignment

Admin Notification Dashboard

Notifications

Multirole Permissions

Standard Pave Permissions

General

Permissions & Settings

Advanced Equity

Global Location Insights

Market Data Pro

How to Search for a Benchmark

Market Data Compensation Database Coverage

Market Data Methodology Overview

Market Data 101

Consistency Labels

Job Families

Calculated Benchmarks

Compensation Types

Data Collection and Aggregation

Percentiles

Filters

Pave's Data

Consistency Labels FAQ

Data FAQs

Calculated Benchmarks FAQ

Location and Global Data FAQs

Equity Practices FAQs

Market Data FAQs

Market Data

Configurations for the Equity Slider

Bonus

Total Rewards Overview

The 'About Us' Section

Equity Currency Conversion

Company Info

Learning Hub in Total Rewards & Visual Offer Letter

Equity Grant Mapper

Stacked Bar Chart

Banners

Configuring Benefits that are displayed in Total Rewards & Visual Offer Letter

Uploading Benefits Data

General Setup

Total Rewards & Visual Offer Letter

SSO Configuration Guide

Share

Share

SSO Configuration Guide

Share

Share