Enabling Gateway SSO - Platform - BlueCat Gateway - 24.1

Before you enable Single Sign-On (SSO), make sure you have configured all components in the SSO configuration page:

• Service Provider settings in the SAML section, which set up Gateway as a service provider for the Identity Provider (IdP)
• Identity Provider settings in the SAML section
• OAuth 2.0 settings in the OAuth section
• (Optional) Advanced settings for signing authorization and encryption in the SAML section, if needed

To enable SSO for Gateway:

1. If necessary, open the SSO Configuration window in Gateway. (Click the Navigator button if necessary, then click Configurations > SSO Configuration.)

2. At the top of the page, select the Enable SSO checkbox.

3. Click Save (in the lower right corner).

4. We strongly recommend that you test your SSO connection right away.

   To test SSO user logins, open a new browser session and log in to Gateway with the username and password of an SSO user.

   To test API access, use an API testing tool like Postman to test the OAuth configuration in Address Manager. For more information, see the Postman documentation at https://learning.postman.com/docs/postman/sending-api-requests/authorization/#oauth-20.

   Tip: We recommend retesting the connection immediately after making any changes to any SSO configuration component.