SSO Configurations - Revision history

IDT-1 at 13:57, 18 November 2022

2022-11-18T13:57:29Z

IDT-1 at 12:03, 18 November 2022

2022-11-18T12:03:57Z

IDT-1 at 06:33, 3 November 2022

2022-11-03T06:33:44Z

IDT-1 at 10:45, 2 September 2022

2022-09-02T10:45:16Z

IDT-1: Created page with " = SSO Configuration = == What is SSO Configuration? == SSO is an authentication process that allows users to access multiple applications, after signing in once. Icertis..."

2022-09-02T10:11:43Z

Created page with " = SSO Configuration = == What is SSO Configuration? == SSO is an authentication process that allows users to access multiple applications, after signing in once. Icertis..."

New page

= SSO Configuration =

== What is SSO Configuration? ==

SSO is an authentication process that allows users to access multiple applications, after signing in once. Icertis supports SAML, OAuth and WS-Fed as Authentication protocols. This utility will also support configurations for all 3 protocols.

== Performing SSO Configuration ==

1. Click “Configure” tile and click “System Configuration”. The “System Configuration – Self-Service” tab will open.
<div class="image-green-border">[[File:E sign 8.2 1.png|250px]]</div> <div class="image-green-border"> </div> <div class="image-green-border">2. Click “SSO Configuration”. The “SSO Configuration” page will open.</div> <div class="image-green-border"> </div> <div class="image-green-border">[[File:SSO Config 8.2 1.png|720px]]</div> <div class="image-green-border"> </div> <div class="image-green-border">
<span style="color:#FF0000;">'''WARNING!'''</span>

The steps mentioned here must be performed by individuals with understanding and expertise of the SSO configuration process. If an incorrect configuration is deployed, users in your organization will not be able to access Icertis Contract Intelligence. If such an event occurs, you will need to contact us for support and rectification.

3. Click “Create” button, from the dropdown select the required SSO Configuration to be done from “SAML2 Configuration”, “WS Fed Configuration” and “OAuth2 Configuration”

 
</div>

@@ Line 9: / Line 9: @@
 .&nbsp;Click “Configure” tile and click “System Configuration”. The “System Configuration – Self-Service” tab will open.
-<div class="image-green-border">[[File:E sign 8.2 1.png|250px|E sign 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">2.&nbsp;Click “SSO Configuration”. The “SSO Configuration” page will open.</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Config 8.2 1.png|720px|SSO Config 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">'''Note: '''User&nbsp;need to have the SSO admin user role assigned&nbsp;to make SSO configuration changes</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Admin.png|720px|SSO Admin.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">
+<div class="image-green-border">[[File:E sign 8.2 1.png|250px|E sign 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">
 <span style="color:#FF0000;">'''WARNING!'''</span>

@@ Line 9: / Line 9: @@
 .&nbsp;Click “Configure” tile and click “System Configuration”. The “System Configuration – Self-Service” tab will open.
-<div class="image-green-border">[[File:E sign 8.2 1.png|250px|E sign 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">2.&nbsp;Click “SSO Configuration”. The “SSO Configuration” page will open.</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Config 8.2 1.png|720px|SSO Config 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">'''Note: '''User&nbsp;need to have the SSO admin user role assigned&nbsp;to make SSO configuration changes</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Admin.png|720px]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">
+<div class="image-green-border">[[File:E sign 8.2 1.png|250px|E sign 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">2.&nbsp;Click “SSO Configuration”. The “SSO Configuration” page will open.</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Config 8.2 1.png|720px|SSO Config 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">'''Note: '''User&nbsp;need to have the SSO admin user role assigned&nbsp;to make SSO configuration changes</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Admin.png|720px|SSO Admin.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">
 <span style="color:#FF0000;">'''WARNING!'''</span>
@@ Line 33: / Line 33: @@
 .&nbsp;Select the “Request Signing Certificate” from the dropdown.
 [[File:SSO Config 8.2 4.png|720px|SSO Config 8.2 4.png]]
 <div class="note-box">'''Note: '''If no certificate is selected, please ensure to keep the 'Enable SP Initiated Logout' turned off while configuring the Identity Providers in the next step. If it is turned on and you have not selected the certificate, you would need to select a certificate, re-generate the metadata and complete the configuration again to ensure seamless logins for all users.</div>
-. Select the “Assertion Encryption Certificate” from the dropdown.
+. “Assertion Encryption Certificate” is auto selected by the system depending upon “Request Signing Certificate” selection option
-. Select the “Bidding Type” from the dropdown.
+*For Non-Prod Instance Select - '''icmstaging.icertis.com'''
 [[File:SSO Config 8.2 5.png|720px|SSO Config 8.2 5.png]]
-.&nbsp;Toggle the “Authentication Request Signed” and “Assertions Signed” switch as required.
+.&nbsp;Toggle the “Authentication Request Signed” and “Assertions Signed” switches as required.
 .&nbsp;Click “Generate Metadata” button once all the necessary fields are filled. The Metadata file will get downloaded in the system.
 [[File:SSO Config 8.2 6.png|720px|SSO Config 8.2 6.png]]
-<div class="note-box">'''Note: '''To reflect the updated information in the file, please ensure to re-generate Metadata, in case any field is modified.</div>
+<div class="note-box">'''Note: '''To reflect the updated information in the file, please ensure to re-generate Metadata, in case any field is modified.</div> <div class="note-box">'''Note – '''Share the generated Metadata with the customer and ask for customer metadata and metadata URL</div>
 . Click “Next”. The next page to add “Service Provider” and “Identity Provider” will open.
@@ Line 64: / Line 76: @@
 .&nbsp;Toggle the “Enable SP Initiated Logout” switch.
 <div class="note-box">'''Note: '''If Yes, ICI will send the signed logout request message to the IdP and will expect a successful logout response from them. If No, ICM will clear its own session and will redirect user to the logout URL. The logout URL can be an ICI based or a customer specific URL.</div>
-. Select “Unique Claim Type” from the “Select Claim Type” dropdown.
+. Select “Unique Claim Type” from the “Select Claim Type” dropdown (Refer the SSO IRD).
 .&nbsp;Click “Save”. The drawer will close.
 . Once both “Service provider” and “Identity Provider” are added. Click “Save”. The SAML2 Configuration will be configured.
 [[File:SSO Config 8.2 9.png|720px|SSO Config 8.2 9.png]]

@@ Line 9: / Line 9: @@
 .&nbsp;Click “Configure” tile and click “System Configuration”. The “System Configuration – Self-Service” tab will open.
-<div class="image-green-border">[[File:E sign 8.2 1.png|250px|E sign 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">2.&nbsp;Click “SSO Configuration”. The “SSO Configuration” page will open.</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Config 8.2 1.png|720px|SSO Config 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">
+<div class="image-green-border">[[File:E sign 8.2 1.png|250px|E sign 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">2.&nbsp;Click “SSO Configuration”. The “SSO Configuration” page will open.</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Config 8.2 1.png|720px|SSO Config 8.2 1.png]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">'''Note: '''User&nbsp;need to have the SSO admin user role assigned&nbsp;to make SSO configuration changes</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">[[File:SSO Admin.png|720px]]</div> <div class="image-green-border">&nbsp;</div> <div class="image-green-border">
 <span style="color:#FF0000;">'''WARNING!'''</span>
@@ Line 16: / Line 16: @@
 .&nbsp;Click “Create” button, from the dropdown select the required SSO Configuration to be done from “SAML2 Configuration”, “WS Fed Configuration” and “OAuth2 Configuration”.
-[[File:SSO Config 8.2 2.png|720px]]
+[[File:SSO Config 8.2 2.png|720px|SSO Config 8.2 2.png]]
 === '''SAML2 Configuration''' ===
@@ Line 30: / Line 30: @@
 . From the “Create” dropdown click “SAML2 Configuration”. The “Create SAML2 Configuration” page will open.
-[[File:SSO Config 8.2 3.png|720px]]
+[[File:SSO Config 8.2 3.png|720px|SSO Config 8.2 3.png]]
 .&nbsp;Select the “Request Signing Certificate” from the dropdown.
-[[File:SSO Config 8.2 4.png|720px]]
+[[File:SSO Config 8.2 4.png|720px|SSO Config 8.2 4.png]]
 <div class="note-box">'''Note: '''If no certificate is selected, please ensure to keep the 'Enable SP Initiated Logout' turned off while configuring the Identity Providers in the next step. If it is turned on and you have not selected the certificate, you would need to select a certificate, re-generate the metadata and complete the configuration again to ensure seamless logins for all users.</div>
 . Select the “Assertion Encryption Certificate” from the dropdown.
@@ Line 40: / Line 40: @@
 . Select the “Bidding Type” from the dropdown.
-[[File:SSO Config 8.2 5.png|720px]]
+[[File:SSO Config 8.2 5.png|720px|SSO Config 8.2 5.png]]
 .&nbsp;Toggle the “Authentication Request Signed” and “Assertions Signed” switch as required.
@@ Line 46: / Line 46: @@
 .&nbsp;Click “Generate Metadata” button once all the necessary fields are filled. The Metadata file will get downloaded in the system.
-[[File:SSO Config 8.2 6.png|720px]]
+[[File:SSO Config 8.2 6.png|720px|SSO Config 8.2 6.png]]
 <div class="note-box">'''Note: '''To reflect the updated information in the file, please ensure to re-generate Metadata, in case any field is modified.</div>
 . Click “Next”. The next page to add “Service Provider” and “Identity Provider” will open.
@@ Line 52: / Line 52: @@
 . To add a “Service Provider”, click “Add Provider” button next to “Service Provider”. The “Add Service Provider” drawer will open.
-[[File:SSO Config 8.2 7.png|720px]]
+[[File:SSO Config 8.2 7.png|720px|SSO Config 8.2 7.png]]
 . Enter the “Logout URL”. Click “Save”.
@@ Line 58: / Line 58: @@
 . To add an “Identity Provider”, click “Add Provider” button next to “Identity Provider”. The “Add Identity Provider” drawer will open.
-[[File:SSO Config 8.2 8.png|720px]]
+[[File:SSO Config 8.2 8.png|720px|SSO Config 8.2 8.png]]
 . Enter the “Metadata Location”.
@@ Line 70: / Line 70: @@
 . Once both “Service provider” and “Identity Provider” are added. Click “Save”. The SAML2 Configuration will be configured.
-[[File:SSO Config 8.2 9.png|720px]]
+[[File:SSO Config 8.2 9.png|720px|SSO Config 8.2 9.png]]
 === '''WS-Fed Configuration''' ===
@@ Line 86: / Line 86: @@
 *Metadata URL: The URL where metadata document is hosted, to be shared with Icertis.
-[[File:SSO Config 8.2 10.png|500px]]
+[[File:SSO Config 8.2 10.png|500px|SSO Config 8.2 10.png]]
 . Select the “Unique Claim Type” from “Select Unique Claim Type” dropdown.
@@ Line 109: / Line 109: @@
 *Token URL: The URL to which ICI will send an Authorization Code to get an access token from IdP.
-[[File:SSO Config 8.2 11.png|500px]]
+[[File:SSO Config 8.2 11.png|500px|SSO Config 8.2 11.png]]
 . Enter the “Resource Owner Profile URL”, “IDP Logout URL”, “Redirect URL” and “Issuer” details.
@@ Line 117: / Line 117: @@
 *Issuer: The OAuth issuer URL.
-[[File:SSO Config 8.2 11.png|500px]]
+[[File:SSO Config 8.2 11.png|500px|SSO Config 8.2 11.png]]
 . Enter “Provider” details and “Post Logout Redirect URL”.
@@ Line 145: / Line 145: @@
 .&nbsp;Click three dots next to the SSO configuration you want to edit, on the SSO Configuration index page.
-[[File:SSO Config 8.2 13.png|720px]]
+[[File:SSO Config 8.2 13.png|720px|SSO Config 8.2 13.png]]
 .&nbsp;The Edit SSO Configuration page will open, make the required edits and click “Save”.
-[[File:SSO Config 8.2 14.png|400px]]
+[[File:SSO Config 8.2 14.png|400px|SSO Config 8.2 14.png]]
 &nbsp;