| Table of Contents |
|---|
| Info |
|---|
About SAML Single Sign-On in SMACS Single Sign-On can be setup in SMACS against any Identity Provider (IdP) which supports SAML 2.0. This guide covers the steps required to setup SAML SSO against Okta, Azure AD & ADFS IdP’s. For an exhaustive list of supported IDP’s, visit SAML-based products and services. |
Install signed certificate on the SMACS machine
...
Click on Add Relying Party Trust
Select default option “Claims Aware”
Select “Import data about the relying party from a file”
Upload the Service Provider (SP) metadata file from previous step.
Provide a meaningful Display Name for the SMACS relying party and click “Next”
Select “Permit everyone” and click “Next””
Enable “Configure claims issuance policy for this application” checkbox and click “Close”
Configure Name Identifier (NameID)
...
Edit Claim Issuance Policy
Click “Add Rule”
Choose Claim rule template “Send LDAP Attributes as Claims” and click “Next”
Provide a Claim rule name, select the Attribute Store “Active Directory” from the dropdown, provide the SAM-Account-Name to Name ID mapping and click “Finish”.
Download your Identity Provider (IdP) Metadata
...