How-to set up SSO

Open

SeaLights support SAML 2 SSO integration and the configuration of the Single Sign-On connection requires steps on both the Customer’s IdP (Identity Provider) and SeaLights sides.

The following items walk you through the necessary steps to achieve the SSO configuration:

1. Open a request to our SeaLights Support to provide you with:

   1. The Assertion Consumer Service (ASC) URL

   2. The Audience URI

   3. The Sealights certificate

2. Set up a SAML 2.0 application on your IdP

   1. Using the information provided by Sealights from the step above

   2. Configure the SAML response to send five attributes for each user (step 4 in the diagram above):

      1. E-mail address, First Name, Last Name

      2. Attribute to be used to map one of the values user, user-admin, user-devops
         This can be any value from your IdP, including multiple values as long as there is a clear mapping from them to one of roles.
         The mapping will be performed on Sealights side

      3. Groups: List of groups the user belongs to for assigning apps that user has access to in Sealights

3. Once this is set up, provide Sealights with one of the options below:

   1. The metadata.xml (preferred)

   2. The Issuer URI, the SSO URL, the certificate

4. We will then test that everything is working properly using a dedicated test user and update the configuration/mapping according to the results of the tests