Difference between revisions of "SSO Check List"

From IVS Wiki
Jump to: navigation, search
 
(32 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
__TOC__
 
__TOC__
−
{{Article | title = SAML Check List | content =
+
{{Article | title = VALT SSO Check List | content =
 
==Where to Begin?==
 
==Where to Begin?==
−
Before SSO is configured on your VALT server, there are a few things that need to be done, setup, and understood. This article aims to help you identify where you are in the process and what steps might need to be done before you configure SSO on your server!
+
Before SSO is configured on your VALT server, there are a few things that need to be done, setup, and understood. This article aims to help you identify where you are in the process and what steps need to be done before you configure SSO on your server!
  
 
{{hr}}
 
{{hr}}
  
 
==SSO Checklist==
 
==SSO Checklist==
−
The following list of items should be done, in order. Identifying where you are in this process is your first step.
+
The following list of items should be done before you configure SSO with VALT. Identifying where you are in this process is your first step!
  
 
{{hr - 2}}
 
{{hr - 2}}
  
−
:{{Checkbox - checked | item = Server racked and patched}}
+
===New System===
−
:{{Checkbox - empty | item = SSL certificate and NTP server installed}}
+
If you have a <b>new system</b>, use this list to identify what needs to be done.
−
::{{Checkbox - empty | item = Understanding of VALT group mappings}}
 
−
::{{Checkbox - empty | item = Understanding of user creation and management}}
 
  
−
{{hr}}
+
{{Section | color = #EEE | content =
−
 
+
:{{Checkbox - checked | item = Identify desire to use SSO for [[Authentication Workflows | VALT authentication]].}}
−
==Required Information from IdP==
+
:{{Checkbox - empty | item = Server racked and patched. <em>**If a VM is being used, ensure you have completed our VM Validation**</em>.}}
−
<dl>
+
:{{Checkbox - empty | item = Create DNS entry for VALT and install an [[SSL Certs | SSL certificate]].
−
<dt>Identity Provider (IdP) URL</dt>
+
::<em>**IVS can assist with generating CSRs and Installing Certificates, but you must source the SSL certificate internally**</em>.}}
−
<dd class="singleLineHeight">This refers to the service or application that manages and authenticates user identities, which VALT will use to verify login credentials.</dd>
+
:{{Checkbox - empty | item = Configure VALT to talk to an NTP server.}}
−
<dt>Remote Sign-In URL</dt>
+
:{{Checkbox - empty | item = Understand the [[Authentication Workflows#SSO_Authentication | SSO workflow]].}}
−
<dd class="singleLineHeight">This is the URL provided by the IDP where users are redirected to initiate the login process.</dd>
+
:{{Checkbox - empty | item = Understand VALT [[VALT_Technical_Specifications#Users_.26_Groups | Users & Groups]].}}
−
<dt>Remote Sign-Out URL</dt>
+
}}
−
<dd class="singleLineHeight">This URL leads to the IDP's logout page, where users can safely end their sessions, ensuring a secure sign-out process from VALT.</dd>
 
−
<dt>Certificate in .cer format</dt>
 
−
<dd class="singleLineHeight">VALT requires a digital certificate in .cer format from the IDP to establish a secure, encrypted communication channel.</dd>
 
−
</dl>
 
  
 
{{hr - 2}}
 
{{hr - 2}}
  
−
<h3>Optional Items</h3>
+
===Existing System===
−
{{Aside - Helpful | content = VALT is also able to map custom attributes to some of the following fields for a user:}}
+
If you have an <b>existing system</b>, use this list to identify what needs to be done.
  
−
<dl>
+
{{Section | color = #BBB | content =  
−
<dt>Display Name Attribute</dt>
+
:{{Checkbox - checked | item = Identify desire to use SSO for [[Authentication Workflows | VALT authentication]].}}
−
<dd class="singleLineHeight">This specifies the user attribute (such as username or email) that VALT displays within the application.</dd>
+
:{{Checkbox - empty | item = Create DNS entry for VALT and install an [[SSL Certs | SSL certificate]].
−
<dd class="singleLineHeight"><em>Helpful when people are not easy to recognize by the username field</em>.</dd>
+
::<em>**IVS can assist with generating CSRs and Installing Certificates, but you must source the SSL certificate internally**</em>.}}
−
<dt>Pin Code</dt>
+
:{{Checkbox - empty | item = Configure VALT to talk to an NTP server.}}
−
<dd class="singleLineHeight">This specifies the code used for authentication into [[BEAM]].</dd>
+
:{{Checkbox - empty | item = Understand the [[Authentication Workflows#SSO_Authentication | SSO workflow]].}}
−
<dd class="singleLineHeight"><em>Without one set, no pin is needed to enter BEAM</em>.</dd>
+
:{{Checkbox - empty | item = Talk with an IVS technician about how account migrations will look in your environment.}}
−
<dt>Card Number</dt>
+
}}
−
<dd class="singleLineHeight">This specifies the card number associated with a user.</dd>
 
−
<dd class="singleLineHeight"><em>Only applies to customers with [https://www.ipivs.com/products/valt-room-controls card readers]</em>.</dd>
 
−
<dt>Email</dt>
 
−
<dd class="singleLineHeight">The users email can also be pulled into the system.</dd>
 
−
<dd class="singleLineHeight"><em>If the VALT application is not connected to mail server, this field is not used for anything.</em></dd>
 
−
</dl>
 
  
 
{{hr}}
 
{{hr}}
  
−
==User Mapping==
+
==Configuration==
−
User mapping is used to map groups in the customer's system to groups within VALT. Users are mapped to VALT groups using attributes and values being passed from the IdP.
+
Once you have that information, you can start looking at the [[Single Sign-On (SSO) | SSO configuration information.]]
−
{{Aside | content = <b>NOTE:</b> SSO in VALT is a one to one mapping for groups}}
 
  
−
{{hr - 2}}
+
{{hr}}
  
−
===Required===
+
[[VALT SSO| &#x293A; Back to VALT SSO Main Page]]
−
<dl>
 
−
<dt>Name</dt>
 
−
<dd class="singleLineHeight">The value to define the mapping. <em>Used only in this section of VALT.</em>
 
−
<dt>Attribute</dt>
 
−
<dd class="singleLineHeight">The item that gets passed back to VALT.</dd>
 
−
<dt>User Value<dt>
 
−
<dd class="singleLineHeight">The value of the item that gets passed back to VALT.</dd>
 
−
<dt>Group to Add</dt>
 
−
<dd class="singleLineHeight">The group created on the VALT side that defines the user's rights in the application.</dd>
 
−
</dl>
 
 
}}
 
}}

Latest revision as of 13:52, 1 April 2024

VALT SSO Check List

Where to Begin?

Before SSO is configured on your VALT server, there are a few things that need to be done, setup, and understood. This article aims to help you identify where you are in the process and what steps need to be done before you configure SSO on your server!

SSO Checklist

The following list of items should be done before you configure SSO with VALT. Identifying where you are in this process is your first step!

New System

If you have a new system, use this list to identify what needs to be done.

☑ Identify desire to use SSO for VALT authentication.

☐ Server racked and patched. **If a VM is being used, ensure you have completed our VM Validation**.

☐ Create DNS entry for VALT and install an SSL certificate.

**IVS can assist with generating CSRs and Installing Certificates, but you must source the SSL certificate internally**.

☐ Configure VALT to talk to an NTP server.

☐ Understand the SSO workflow.

☐ Understand VALT Users & Groups.

Existing System

If you have an existing system, use this list to identify what needs to be done.

☑ Identify desire to use SSO for VALT authentication.

☐ Create DNS entry for VALT and install an SSL certificate.

**IVS can assist with generating CSRs and Installing Certificates, but you must source the SSL certificate internally**.

☐ Configure VALT to talk to an NTP server.

☐ Understand the SSO workflow.

☐ Talk with an IVS technician about how account migrations will look in your environment.

Configuration

Once you have that information, you can start looking at the SSO configuration information.

⤺ Back to VALT SSO Main Page
Retrieved from "https://ipivs.info/wiki/index.php?title=SSO_Check_List&oldid=12743"