How-to set up SSO

SeaLights support SAML 2 SSO integration and the configuration of the Single Sign-On connection requires steps on both the Customer’s IDP and SeaLights sides.

The following items walk you through the necessary steps to achieve the SSO integration:

1. Set up a SAML 2.0 application on your IDP which will be filled with:

   1. The Assertion Consumer Service URL

   2. The Audience URI

   3. A certificate SeaLights will provide

2. For each user accessing Sealights dashboard, five attributes need to be passed to SeaLights as part of the SAML response:

   1. E-mail address, First Name, Last Name

   2. Role mapped to one of the values user, user-admin, user-devops

   3. Groups: List of groups the user belongs to for assigning apps that user has access to in Sealights

3. Once this is set up, provide Sealights with one of the options below:

   1. The metadata.xml (preferred)

   2. The Issuer URI, the SSO URL, the certificate

4. We will then test that everything is working properly using a dedicated test user and modify the configuration/mapping according to the results of the tests