SAML v2 Setup
Before you begin the setup, obtain Identity Provider SSO URL, Identity Provider Issuer and the X.509 Certificate from the Identity Provider.
-
Select Settings in the sidebar, then select Integrations.
-
Select .
-
Configure the following parameters:
- Identity Provider SSO URL—enter the Identity Provider SSO URL. This is the endpoint on the Identity Provider side where LiveAssurance posts SAML requests to.
- Identity Provider Issuer—enter the name of the Identity Provider Issuer.
- Identity Provider Certificate—paste the X.509 Certificate. LiveAssurance needs to obtain the public certificate from the IdP to validate the signature.
- Select default role—select the default role for users who log in to the LiveAssurance Web Application using SAML v2 authentication.
-
Select Save.
Step 2: Configure the Identity Provider for single sign-on login to LiveAssurance
Provide the information below to be copied and pasted into the configuration of the Identity Provider.
Provide this Assertion Consumer Service URL to your Identity Provider. Use this URL in your identity provider to begin the setup.
Step 3: Login to LiveAssurance using SSO
You can sign in to LiveAssurance from the Identity Provider user portal. This is known as the IdP-initiated sign-in flow. Alternatively, you can sign in to LiveAssurance using the LiveAssurance login page with SAML authentication by selecting the SSO LOGIN button. This is known as the SP-initiated sign-in flow.
Assigning a different role other than the default
-
Select the Settings tab in the sidebar, then select Users.
-
Select the vertical ellipsis icon in the row containing the user whose role you want to modify, then select Edit.
-
Under Groups and Roles, modify the role.
-
Select Save.
Migration Considerations
If SSO is mandated in your environment and you want to disable local users, remove existing users from the local database as part of the migration process. Unlike LDAP & Radius, LiveAssurance never directly interacts with the IdP. A browser acts as the agent to carry out all the redirections. Since LiveAssurance doesn’t interact with the IdP, there is no easy way we can easily test the setup like we do with Radius and LDAP. You should first validate the SAML authentication for one user before removing remaining users from the local database.