How-to set up SSO

SeaLights support SAML 2 SSO integration and the configuration of the Single Sign-On connection requires steps on both the Customer’s IdP (Identity Provider) and SeaLights sides.

The following items walk you through the necessary steps to achieve the SSO configuration:

1. Open a request to our SeaLights Support to provide you with:

   1. The Assertion Consumer Service (ASC) URL

   2. The Audience URI

   3. The Sealights certificate

2. Set up a SAML 2.0 application on your IdP

   1. Using the information provided by Sealights from the step above

   2. Configure the SAML response to send five attributes for each user (step 4 in the diagram above):

      1. E-mail address, First Name, Last Name

      2. Role mapped to one of the values user, user-admin, user-devops

      3. Groups: List of groups the user belongs to for assigning apps that user has access to in Sealights

3. Once this is set up, provide Sealights with one of the options below:

   1. The metadata.xml (preferred)

   2. The Issuer URI, the SSO URL, the certificate

4. We will then test that everything is working properly using a dedicated test user and update the configuration/mapping according to the results of the tests