Page History

The “Administer Configuration SAML” role permission is required to use SAML to access Secret Server. To grant a user this permission from an administrator account:

1. Go to Admin > Roles. The Roles page appears.

2. Click the Create New button. The Role Edit page appears:

3. Type the name, such as SAML, in the Role Name text box.

4. Click to select the Enabled check box.

5. Click Administer Configuration SAML in the right side Permissions Unassigned list box.

6. Click the < button to move the permission to the other side.

7. Click the Save button. 

Select Settings in the navigation pane.

Select SSO under USERS in the Control Panel page.

Click the Assign Roles link of the newly created role. The View Role Assignment page appears

Click the Role dropdown list to select the role you just created.

The Entity ID/ Issuer ID will match the Entity ID you specified in the DualShield Service Provider.

There are two parts for specifying the Sign-In and Log-Out Page URLs

The first part is that you will use the SingleSignOnService and SingleLogoutService URLs you copied from the DualShield SSO Server Metadata (see previous section) respectively.

The second part is that you will append these URLs with some extra information.

e.g.

Sign-in page URL

https://dualshield.yourdomain.com:8074/sso/Login/kvps/DASApplicationName/Ctera

Log-out page URL