Follow the steps below to create a logon procedure, Application and SSO IDP and SP configuration on DualShield.
Add a Logon Procedure:
Log on to the DualShield Administration Console and go to Authentication>Logon Procedure |
|
Click on 
on the top right.
In the new Logon Procedure window, please enter the following information: | Option | Value |
|---|
| Name: | Enter a friendly name | | Type: | Web SSO |
Click: Save |
|
Add Logon Steps
Select the drop down menu corresponding to the Logon Procedure you will be using and click on Logon Steps. |
|
In the Logon Steps Dialogue box, click the 
button.
Tick the desired authentication method, e.g. Static Password |
|
Click Save.
Repeat to add extra steps.
| I have added two steps; Static Password and One-Time Password |
|
Create an Application
Authentication> Applications |
|
Click on on the top right.
In the new Application window, please enter the following information: | Option | Value |
|---|
| Name: | Enter a friendly name | | Realm: | Select your Realm | | Logon Procedure: | Select the Logon Procedure you had created in the previous step |
Click: Save |
|
Bind the Application to an SSO Server Agent
Select the drop down menu corresponding to the Application you will be using and click on Agents. |
|
Tick the box of the SSO Server you will be using and click Save below. |
|
Create a Service Provider Profile
Go to SSO>Service Providers |
|
Click on on the top right.
Fill in the details as per screenshot on right and make sure you select SAML 2.0(Without Metadata) as Type. |
|
Now fill out Entity ID and ACS URL. | Option | Value |
|---|
| Entity ID: | | | ACS URL: | |
|
|
The completed Service Provider dialogue box will look like this: |
|
But do not click Save yet.
Create a username attribute.
Click on the Attributes tab at the top. |
|
Click
At the top of the New Attribute dialogue box please specify the following: | Option | Value |
|---|
| Location: | | | Name: | | | Format: | urn....unspecified |
|
|
Under Value select the option for Maps to and click on the search icon. |
|
Configure as follows: | Option | Value |
|---|
| Identity Source: | Specify your identity source | | Maps to: | |
Click Save. |
|
Go back to General Settings tab at the top |
|
Specify username to the Attribute field. Click Save. |
|
Download the IDP Metadata file.
Select the drop down menu corresponding to the SSO server you will be using and click on Download IDP Metadata. |
|
