To integrate Advanced Authentication with the third-party solutions using SAML 2.0, perform the following steps
Create a SAML 2.0 event. For more information on how to create a event, see Creating a SAML 2.0 Event.
Click Policies > Web Authentication.
(Conditional) Specify the Identity Provider’s URL in Identity provider URL. For more information, see Configuring the Identity Provider.
NOTE:To use multiple Advanced Authentication servers with SAML 2.0, you must do the following:
Configure an external load balancer.
Specify the address in Identity provider URL instead of specifying an address of a single Advanced Authentication server.
(Conditional) Click IdP SAML 2.0 Metadata to download the SAML 2.0 metadata. You can download the SAML 2.0 metadata file only when the Identity Provider's URL is configured. The downloaded SAML 2.0 metadata file is used to configure the Service Provider.
Click Save.
Click Server Options > Signing Certificate and save the certificate content in a notepad file for further use.
NOTE:Use the Identity Provider Signing certificate in your Service Provider.
NOTE:The logout URL must follow the below format:
https://<AAServer>/osp/a/TOP/auth/app/logout
where TOP is the name of the tenant.
However, it is possible to perform the logout from both Identity Provider and Service Provider using the following URL:
https://<AAServer>/osp/a/TOP/auth/app/logout?target=https://<Service Provider>/app/logout
For example: https://<AAServer>/osp/a/TOP/auth/app/logout?target=https://<NAMServer>/nidp/app/logout
The following are the examples of integration with SAML 2.0.