How-to set up SSO

SeaLights support SAML 2 SSO integration. Configuring the SSO needs to be done on both IDP and SeaLights side, the following items walk you through the necessary steps to achieve the SSO integration:

1. Set up a SAML 2.0 application on your IDP which will be filled with the Assertion Consumer Service URL, the Audience URI and a certificate SeaLights will provide

2. 5 attributes need to be passed to us:

   1. E-mail

   2. First Name

   3. Last Name

   4. Role (user-devops, user-admin, user)

   5. Groups (List of groups the user belongs to for assigning apps that user has access to in Sealights)

3. Once this is set-up, provide us with the metadata.xml or the Issuer URI, the SSO URL and the certificate.

4. We will then test that everything is working properly using a test user and modify the configuration/mapping according the results of the tests

5. At this point, we will be ready assign all your users to work through SSO connection