SAML Authentication

saml is a protocol used to share security credentials across one or more network systems saml authentication integration can be used to integrate external identity providers with single connect single connect can be integrated with onelogin identity provider onelogin integration consists of two steps onelogin configuration single connect configuration onelogin configuration first you need to add single connect to onelogin as an application to add single connect as an application, perform the following configuration steps in onelogin go to the applications section in onelogin click add app and search for saml custom connector (advance) enter a display name (such as single connect) and then click save navigate to the configuration tab of the created single connect app fill in the following parameters related to single connect audience singleconnecthost/samlcheck ex https //10 20 30 40/login ui/samlcheck recipient url singleconnecthost/samlrecipient ex https //10 20 30 40/login ui/samlrecipient acs (consumer) url validator set “ ” regular expression acs (consumer) url same as recipient ex https //10 20 30 40/login ui/samlrecipient single logout url url singleconnecthost/samllogout ex https //10 20 30 40/login ui/samllogout the email (saml nameid) should be the same as the single connect username after saving the configurations above, go to the sso tab of the added application to extract some information for filling single connect saml configuration parameter name example value issuer url https //app onelogin com/saml/metadata/2e0421c6 f623 4f9f xxxx yyy https //app onelogin com/saml/metadata/2e0421c6 f623 4f9f xxxx yyy saml 2 0 endpoint (http) https //single onelogin com/trust/saml2/http post/sso/2e0421c6 f623 4f9f xxxx yyy https //single onelogin com/trust/saml2/http post/sso/2e0421c6 f623 4f9f xxxx yyy slo endpoint (http) https //single onelogin com/trust/saml2/http redirect/slo/1708xxx https //single onelogin com/trust/saml2/http redirect/slo/1708xxx x 509 certificate begin certificate miiemjccaxqgawibagiug2hxqgrmpy/puehfqtqzw0yaelawdqyjkozihvcnaqef bqawytesmcoga1uecgwjs3jvbibuzwxla29tdw5pa2fzew9uiehpem1ldgxlcmkg qxmxftatbgnvbasmde9uzuxvz2luielkudeambgga1ueawwrt25ltg9naw4gqwnj hkqm6mlnsrnfcipdrtz1lqf2vkgc9g== end certificate single connect configuration after adding single connect as an application in onelogin, you need to set additional configurations in single connect step 1 define the required parameters in single connect navigate to administration > system config man open the saml config tab fill in the following parameters related to onelogin parameter name description example value enable saml it must be enabled to use saml authentication saml entity id saml test connector issuer ur l from the onelogin portal https //app onelogin com/saml/metadata/2e0421c6 f623 4f9f xxxx yyy https //app onelogin com/saml/metadata/2e0421c6 f623 4f9f xxxx yyy saml logout url saml connector slo endpoint (http) url from the onelogin portal https //single onelogin com/trust/saml2/http redirect/slo/1708xxx https //single onelogin com/trust/saml2/http redirect/slo/1708xxx saml remote url personal portal url https //single onelogin com/portal https //single onelogin com/portal saml url saml connector saml 2 0 endpoint (http) url from the onelogin portal https //single onelogin com/trust/saml2/http post/sso/2e0421c6 f623 4f9f xxxx yyy https //single onelogin com/trust/saml2/http post/sso/2e0421c6 f623 4f9f xxxx yyy saml x509 cert key saml connector x 509 certificate from the onelogin portal begin certificate miiemjccaxqgawibagiug2hxqgrmpy/puehfqtqzw0yaelawdqyjkozihvcnaqef bqawytesmcoga1uecgwjs3jvbibuzwxla29tdw5pa2fzew9uiehpem1ldgxlcmkg qxmxftatbgnvbasmde9uzuxvz2luielkudeambgga1ueawwrt25ltg9naw4gqwnj hkqm6mlnsrnfcipdrtz1lqf2vkgc9g== end certificate step 2 add tomcatcorsfilter to the tomcat configuration file after setting the required configuration in step 1, you need to tomcatcorsfilter in the tomcat configuration open the web xml file under the following directory /u01/netright tomcat/conf find tomcatcorsfilter part and add onelogin url, as shown below in bold