How-to set up SSO

SeaLights support SAML 2 SSO integration and the configuration of the Single Sign-On connection requires steps on both the Customer’s IDP and SeaLights sides.

The following items walk you through the necessary steps to achieve the SSO integration:

1. Set up a SAML 2.0 application on your IDP which will be filled with:

   1. The Assertion Consumer Service URL,

   2. The Audience URI,

   3. A certificate SeaLights will provide.

2. For each user accessing Sealights dashboard, five attributes need to be passed to us:

   1. E-mail address, First Name, Last Name

   2. Role mapped to one of the values user, user-admin, user-devops

   3. Groups: List of groups the user belongs to for assigning apps that user has access to in Sealights

3. Once this is set up, provide Sealights with:

   1. The metadata.xml or the Issuer URI

   2. The SSO URL

   3. The certificate

4. We will then test that everything is working properly using a dedicated test user and modify the configuration/mapping according to the results of the tests