TASS - Revision history

Dlim at 04:32, 19 October 2021

2021-10-19T04:32:13Z

Dlim at 02:07, 19 October 2021

2021-10-19T02:07:19Z

Dlim: /* To set up SAML */

2020-12-09T22:47:51Z

To set up SAML

Dlim at 01:55, 9 December 2020

2020-12-09T01:55:29Z

Jrobertson at 01:40, 9 December 2020

2020-12-09T01:40:17Z

Jrobertson at 01:10, 13 May 2020

2020-05-13T01:10:40Z

Jrobertson at 01:09, 13 May 2020

2020-05-13T01:09:36Z

Jrobertson at 00:49, 13 May 2020

2020-05-13T00:49:29Z

Jrobertson: Created page with "To set up SAML: #Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance. #Click View next to the product/portal you wish to modify. #In the Users tab, c..."

2020-05-13T00:49:09Z

Created page with "To set up SAML: #Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance. #Click View next to the product/portal you wish to modify. #In the Users tab, c..."

New page

To set up SAML:

#Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance.
#Click View next to the product/portal you wish to modify.
#In the Users tab, check that your mappings between TASS users/entities and users in your identity provider are correct. The testing I did with CloudWorks suggests they were passing back just the usernames (ie SAM Account Name or Pre-Windows 2000 Usernames from AD) so they are likely correct.
#In the LDAP tab, click Edit LDAP, set Enabled to No, then click Save.
#In the SAML tab, click Edit SAML, then:
*Paste in the metadata URL from your CloudWorks system.
*Click Fetch IDP Metadata XML.
*You’ll see a few prompts about overwriting metadata and generating certificates. Click OK on all of them.
*Set Enabled to Yes.
*Click Save.
*Click Download SP Metadata XML and store the downloaded metadata which you’ll need for the next step.
*Go to your identity provider and complete the configuration required. You’ll need to upload the previously generated metadata as it will contain configuration that is required.

Test and repeat for other products/portals as required.

[[Category:Single Sign On Services]]

@@ Line 8: / Line 8: @@
 #In the LDAP tab, click Edit LDAP, set Enabled to No, then click Save.
 #In the SAML tab, click Edit SAML, then:
-##Paste in the metadata URL from Cloudwork(This is found under Cloudwork Dashboard>Single Sign On>Identity Provider>Entity ID).<br>[[File:Entity_id.PNG|300px|centre|frame|Example of Entity ID]]
+##Paste in the metadata URL from Cloudwork(This is found under '''Cloudwork Dashboard'''>'''Single Sign On'''>'''Identity Provider'''>'''Entity ID''').<br>[[File:Entity_id.PNG|300px|centre|frame|Example of Entity ID]]
 ##Click Fetch IDP Metadata XML.
 ##You’ll see a few prompts about overwriting metadata and generating certificates. Click OK on all of them.

@@ Line 3: / Line 3: @@
 ==To set up TASS SSO==
-#Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance.
+#Log in to TASS.web and go to '''System Admin''' > '''Users''' > '''LDAP/SAML Maintenance'''.
-#Click View next to the product/portal you wish to modify.
+#Click '''View''' next to the product/portal you wish to modify.
 #In the Users tab, check that your mappings between TASS users/entities and users in Cloudwork are correct.
 #In the LDAP tab, click Edit LDAP, set Enabled to No, then click Save.
 #In the SAML tab, click Edit SAML, then:
-##Paste in the metadata URL from Cloudwork(This is found under Cloudwork Dashboard>Single Sign On>Identity Provider>Entity ID).
+##Paste in the metadata URL from Cloudwork(This is found under Cloudwork Dashboard>Single Sign On>Identity Provider>Entity ID).<br>[[File:Entity_id.PNG|300px|centre|frame|Example of Entity ID]]
 ##Click Fetch IDP Metadata XML.
 ##You’ll see a few prompts about overwriting metadata and generating certificates. Click OK on all of them.
@@ Line 16: / Line 16: @@
 ==To set up Cloudwork SSO==
-#Go to the Cloudwork Dashboard>Single Sign On>Add New Service>Upload an XML File
+#Go to the '''Cloudwork Dashboard'''>'''Single Sign On'''>'''Add New Service'''>'''Upload an XML File'''
 #Enter under '''Name''', Tass or another suitable name for the SSO service
 #In '''Choose an XML File''': Upload the metadata file which was downloaded from TASS

@@ Line 1: / Line 1: @@
 TASS setup
-==To set up SAML==
+==To set up TASS SSO==
 #Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance.
@@ Line 14: / Line 14: @@
 ##Click Save.
 ##Click Download SP Metadata XML and store the downloaded metadata which you’ll need for the next step.
-##Go to your identity provider and complete the configuration required. You’ll need to upload the previously generated metadata as it will contain configuration that is required.
 [[Category:Single Sign On Services]]

@@ Line 8: / Line 8: @@
 #In the LDAP tab, click Edit LDAP, set Enabled to No, then click Save.
 #In the SAML tab, click Edit SAML, then:
-##Paste in the metadata URL from your Cloudwork dashboard.
+##Paste in the metadata URL from Cloudwork(This is found under Cloudwork Dashboard>Single Sign On>Identity Provider>Entity ID).
 ##Click Fetch IDP Metadata XML.
 ##You’ll see a few prompts about overwriting metadata and generating certificates. Click OK on all of them.

@@ Line 5: / Line 5: @@
 #Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance.
 #Click View next to the product/portal you wish to modify.
-#In the Users tab, check that your mappings between TASS users/entities and users in your identity provider are correct. The testing I did with CloudWorks suggests they were passing back just the usernames (ie SAM Account Name or Pre-Windows 2000 Usernames from AD) so they are likely correct.
+#In the Users tab, check that your mappings between TASS users/entities and users in Cloudwork are correct.
 #In the LDAP tab, click Edit LDAP, set Enabled to No, then click Save.
 #In the SAML tab, click Edit SAML, then:
-##Paste in the metadata URL from your CloudWorks system.
+##Paste in the metadata URL from your Cloudwork dashboard.
 ##Click Fetch IDP Metadata XML.
 ##You’ll see a few prompts about overwriting metadata and generating certificates. Click OK on all of them.

← Older revision		Revision as of 01:09, 13 May 2020
Line 16:		Line 16:
	##Go to your identity provider and complete the configuration required. You’ll need to upload the previously generated metadata as it will contain configuration that is required.		##Go to your identity provider and complete the configuration required. You’ll need to upload the previously generated metadata as it will contain configuration that is required.

−	~~Test and repeat for other products/portals as required.~~

	[[Category:Single Sign On Services]]		[[Category:Single Sign On Services]]