TASS

To set up SAML:

1. Log in to TASS.web and go to System Admin > Users > LDAP/SAML Maintenance.
2. Click View next to the product/portal you wish to modify.
3. In the Users tab, check that your mappings between TASS users/entities and users in your identity provider are correct. The testing I did with CloudWorks suggests they were passing back just the usernames (ie SAM Account Name or Pre-Windows 2000 Usernames from AD) so they are likely correct.
4. In the LDAP tab, click Edit LDAP, set Enabled to No, then click Save.
5. In the SAML tab, click Edit SAML, then:
   1. Paste in the metadata URL from your CloudWorks system.
   2. Click Fetch IDP Metadata XML.
   3. You’ll see a few prompts about overwriting metadata and generating certificates. Click OK on all of them.
   4. Set Enabled to Yes.
   5. Click Save.
   6. Click Download SP Metadata XML and store the downloaded metadata which you’ll need for the next step.
   7. Go to your identity provider and complete the configuration required. You’ll need to upload the previously generated metadata as it will contain configuration that is required.