Page Comparison

...

SeaLights support SAML 2 SSO integration and the configuration of the Single Sign-On connection requires steps on both the Customer’s IDP IdP (Identity Provider) and SeaLights sides.

The following items walk you through the necessary steps to achieve the SSO integrationconfiguration:

1. Set up a SAML 2.0 application on your IDP which will be filled Open a request to our SeaLights Support to provide you with:

   1. The Assertion Consumer Service (ASC) URL

   2. The Audience URI

   3. A certificate SeaLights will provide

   For each user accessing Sealights dashboard, five attributes need to be passed to SeaLights as part of the SAML response

   1. The Sealights certificate

2. Set up a SAML 2.0 application on your IdP

   1. Using the information provided by Sealights from the step above

   2. Configure the SAML response to send five attributes for each user (step 4 in the diagram above):

      1. E-mail address, First Name, Last Name

      2. Role mapped to one of the values user, user-admin, user-devops

      3. Groups: List of groups the user belongs to for assigning apps that user has access to in Sealights

3. Once this is set up, provide Sealights with one of the options below:

   1. The metadata.xml (preferred)

   2. The Issuer URI, the SSO URL, the certificate

4. We will then test that everything is working properly using a dedicated test user and modify the configuration/mapping according to the results of the tests