Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
organisationcloud/saml [2020_01_02 17:19] smeadminorganisationcloud/saml [2020_01_02 17:33] smeadmin
Line 276: Line 276:
 ===== Configuring with Okta ===== ===== Configuring with Okta =====
  
-From your Administrative Okta account, click on **Applications** from the top menu, and then click **Add Application**. From the left menu click on the **Create New App** button. +From your Okta's Administrative account, click on **Applications** from the top menu, and then click **Add Application**. From the left menu click on the **Create New App** button. 
  
 For the **Platform** option, select **Web**.  For the **Platform** option, select **Web**. 
Line 284: Line 284:
 Then click **Create**.  Then click **Create**. 
  
-On the next screen we need to supply some basic information for the application. +On the next screenwe need to supply some basic information for the application. 
  
 For the **App Name**, provide a friendly name for the SME service, e.g. **Enterprise File Fabric**. Optionally you can also provide an **App logo** that users would recognize.  For the **App Name**, provide a friendly name for the SME service, e.g. **Enterprise File Fabric**. Optionally you can also provide an **App logo** that users would recognize. 
Line 292: Line 292:
 On the **SAML settings** screen we want to configure the fields as follows: On the **SAML settings** screen we want to configure the fields as follows:
  
-  * __Single sign on URL__ - This should be the URI of your SME appliance, appended by "/saml.htm". For example "https://sme.example.com/saml.htm" +  * __Single sign on URL__ - This should be the URI of your Enterprise File Fabric appliance, appended by "/saml.htm". For example "https://sme.example.com/saml.htm" 
-  * __Audience URI__ - This should be the URI of your SME Appliance, e.g. "https://sme.example.com"+  * __Audience URI__ - This should be the URI of your Enterprise File Fabric appliance, e.g. "https://sme.example.com"
   * __Default RelayState__ - This should be left blank   * __Default RelayState__ - This should be left blank
   * __Name ID format__ - Select Email Address   * __Name ID format__ - Select Email Address
Line 303: Line 303:
   * In **Single Logout URL** enter the value you entered in **Audience URI**   * In **Single Logout URL** enter the value you entered in **Audience URI**
   * In **SP Issuer** enter the value you entered in **Audience URI**   * In **SP Issuer** enter the value you entered in **Audience URI**
-  * From the **Signature Certificate** upload the Signing Certificate that can be obtained from your File Fabric Auth System configuration screen. +  * From the **Signature Certificate** upload the Signing Certificate that can be obtained from your Enterprise File Fabric appliance Auth System configuration screen. 
  
 Under **Attribute Statements** configure the mappings as follows:  Under **Attribute Statements** configure the mappings as follows: 
Line 311: Line 311:
   * Name "username", Name format "basic", Value "user.login"   * Name "username", Name format "basic", Value "user.login"
  
-Under **Group Attribute Statements**, you will need to [choose which groups need to be exposed to the File Fabric](https://help.okta.com/en/prod/Content/Topics/Apps/attribute-statements-saml.htm). +Under **Group Attribute Statements**, you will need to [choose which groups need to be exposed to the Enterprise File Fabric](https://help.okta.com/en/prod/Content/Topics/Apps/attribute-statements-saml.htm). 
  
-A Groups Entry will need to be added with a name of "groups". The Value is dependant on what you would like to expose to the File Fabric. Some examples are below:+A Groups Entry will need to be added with a name of "groups". The Value is dependant on what you would like to expose to the Enterprise File Fabric. Some examples are below:
  
   * Contains: IT - Matches groups containing the word "IT"   * Contains: IT - Matches groups containing the word "IT"
Line 321: Line 321:
  
 On the **Application Details** screen, under **Sign On**, click the **View Setup Instructions** button.  On the **Application Details** screen, under **Sign On**, click the **View Setup Instructions** button. 
- 
  
 On the File Fabric SAML Auth System screen, enter the following values: On the File Fabric SAML Auth System screen, enter the following values:
Line 327: Line 326:
   * The Service provider entity ID - The URI entered earlier from the **Audience URI** field   * The Service provider entity ID - The URI entered earlier from the **Audience URI** field
   * SSO entry point - Enter the **Identity Provider Single Sign-On URL** found on the Okta setup instructions screen   * SSO entry point - Enter the **Identity Provider Single Sign-On URL** found on the Okta setup instructions screen
-  * The logout service endpoint - Enter the **Identity Provider Single Logout URL** found on the Okta setup instructions screen. +  * The logout service endpoint - Enter the **Identity Provider Single Logout URL** found on the Okta setup instructions screen.
   * x509 Certificate - Enter the **X.509 Certificate** found on the Oka setup instructions screen   * x509 Certificate - Enter the **X.509 Certificate** found on the Oka setup instructions screen
  
 Before users are able to access the Okta application, Users or Groups must be assigned the application for it to be available to them.  Before users are able to access the Okta application, Users or Groups must be assigned the application for it to be available to them. 
 +
 +Your Okta setup with the Enterprise File Fabric is now complete.