Configuring SAML Authentication Login

Overview

This chapter introduces the integration configuration process of IDaaS as a Service Provider (SP) with a third-party Identity Provider (IDP). After configuring and integrating the SAML authentication source on the IDaaS platform, refer to this module to configure SAML authentication login. When accessing an application system, IDaaS will redirect to the third-party Identity Provider to complete identity authentication.

Prerequisites

• An application has been created on a third-party Identity Provider (IDP) platform that supports SAML authentication.
• You have administrator privileges on the IDaaS Enterprise Center platform.
• The application has been integrated on the IDaaS platform.
• The SAML authentication source has been configured on the IDaaS platform /guide/admin/auth_source/samlsource.html.

Configuration Process

Steps

Configuring SAML Authentication for an Application

1. Log in to the IDaaS Enterprise Center platform, select "Resources > Applications" in the top navigation bar, taking the User Center application as an example, select "User Center", switch to the "Login Configuration" tab, scroll down to SAML, and enable the previously added SAML authentication source.

   

Verifying SAML Authentication Login

The actual SAML authentication login flow is related to the "When user is not associated" option in Configuring SAML Authentication Source. Please refer to the on-screen prompts for login.

1. Log in to the User Center. On the application system login page, select saml authentication login, using Okta as an example here.

   

2. The page redirects to the Okta login page. Use your Okta account credentials to log in to the User Center.