SSO Check List

From IVS Wiki
Revision as of 11:49, 27 March 2024 by IVSWikiBlue (talk | contribs)
Jump to: navigation, search

Where to Begin?

Before SSO is configured on your VALT server, there are a few things that need to be done, setup, and understood. This article aims to help you identify where you are in the process and what steps might need to be done before you configure SSO on your server!

The following list of items should be done, in order. Identifying where you are in this process is your first step.


☑ SSO Checklist

☐ Server racked and patched

☐ SSL certificate and NTP server installed

☐ Understanding of VALT group mappings

☐ Understanding of user creation and management


To configure SSO VALT needs the following information:

  • Identity Provider (IDP)
  • Remote Sign-In URL
  • Remote Sign-Out URL
  • Certificate in .cer format
  • Display Name Attribute
  • Any other custom attributes needed

After SSO is configured browse to https://<Server Address>/saml/metadata.xml to grab the VALT metadata to add to your system


User Mapping

User mapping is used to map groups in the customer's system to groups within VALT

NOTE: SSO in VALT is a one to one mapping for groups

Required

Users are mapped to VALT groups using attributes and values being passed from the IdP.

Name
The value to define the mapping. Used only in this section of VALT.
Attribute
The item that gets passed back to VALT.
User Value
The value of the item that gets passed back to VALT.
Group to Add
The group created on the VALT side that defines the user's rights in the application.