Contents

Introduction

This page is a guide for configuring SAML 2.0 application integration in Ubisecure SSO.

...

Also it is good to understand what requests application’s SAML plug-in supports. Good to keep in mind that Ubisecure provides a plug-in SAML SP for Java application as well if needed.

SAML 2.0 Application Creation and Metadata Activation

Log in into Ubisecure SSO and follow the steps below to complete the task. You can obtain the SSO metadata file or link, from the [SAML 2.0], in the image in step 1 below. This information, either the metadata file or the link, to the application integrator.

1. Start the configuration by creating a new site. Give a name to the site. E.g. ‘Extranet’. You may have several applications in this site

   Expand
   title Show image

   
   

2. Create a new application by clicking on “New Application…”

   Expand
   title Show image

   
   

3. Name it e.g. ‘Web Shop’, select Application type as ‘SAML Service Provider’ and check the ‘Enable’ check box. Click ‘OK’

   Expand
   title Show image

   
   

4. Activate the web application’s Metadata, either by uploading the xml file, or by pasting the content for the xml file

   Expand
   title Show image

   
   

5. Click ‘Update’ to save the configuration to finalize the metadata activation

   
   

Creating Authorization Policy

Next, we will create an authorization policy for the site and add it to the application’s agent. Go to the site level (Extranet), and select ‘Authorization’ –tab. Click ‘New Policy…’ and select ‘CustomerID password’. From now on all these methods added at the site level are available for activation for the applications in this Site

1. Go to the ‘Authorization’ –tab now, and create a new policy e.g. ‘AP for the Web Shop’. Click ‘OK’. Next, go to ‘Attributes’ –tab to add the attributes which are forwarded to the application

   Expand
   title Show image

   
   

2. Attributes can be added to the Application’s Authorization Policy.

   Expand
   title Show image (example attributes)

   
   

3. Click ‘Add…’ and select the Application to use this authorization policy. Click ‘OK’

   Expand
   title Show image

   
   

Adding Authentication Method

Next will add the authentication method to the site and activate it to the ‘Web Shop’ -application. Select ‘Extranet’ –site and ‘Site Methods’ –tab.

...