To configure SAML single sign-on:


Go to Users

Under Authenticators enable Single Sign-on / SAML



Click on Configure on the right. This will open the Single Sign-On / SAML configuration dialogue box.



 





Enter the details of the SAML identity provider:


Click Add IDP


Follow the prompts to upload the IDP Metadata File you obtained from the DualShield Server.  (refer to Dualshield Configuration Part 1)




 






After adding the IDP metadata, the name must be entered. This name will appear on the IDP's button on the login page.


The User matching checkbox on the right is optional.








Complete the site URL* and administrative contact details.

*If you have had to use an alternative HTTP/HTTPS port, please specify the port number in the site URL.


Click the Save Service Provider (SP) metadata link below

At the prompt make a note of the URL that will be used to download the SP Metadata, or simply click Yes to copy the link to the clipboard.






You will also need to download the IdP Certificate

Click on Ok to exit out of the Single Sign-On / SAML configuration dialogue box, and click on the Apply Changes button on the top right of the main console.