Changes

Jump to: navigation, search

Single Sign-On

1,005 bytes removed, 18:11, 5 December 2019
→‎Optional Information
* Finish the setup, and then return to the "Claim Rules" editor, and select the "Issuance Transform Rules" tab and add a new rule. Set the "Rule Type" to use the 'Send LDAP Attributes as Claims' template and configure the mapping to the agreed upon user identifier (e.g. LDAP attribute 'E-Mail-Addresses' to Outgoing Claim Type 'NameID'). Depending on your ADFS version and setup you may instead need to create two rules, one to map the attributes E-mail to E-mail, and then a second rule to transform the E-mail to the outgoing NameID.
* To test or use this connection use your internal ADFS URL and specify the loginToRp parameter as the SmartSimple SAML entity ID, e.g. '''https://adfs.yourlocaldomain.com/adfs/ls/idpinitiatedsignon.aspx?loginToRp=https://alias.smartsimple.com/'''.<br/> If you aren't automatically redirected into SmartSimple you may need to have RelayState enabled in ADFS, and then use a RelayState parameter to achieve this, e.g. '''https://adfs.yourlocaldomain.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Dhttps%3A%2F%2Falias.smartsimple.com%2F%26RelayState%3Dhttps%253A%252F%252Falias.smartsimple.com%252F'''.
 
===Optional Information===
The following optional attributes can be used in the assertion. Please note that they are case sensitive and should be labelled exactly.
 
* SSOModule - used to specify the SmartSimple SSO connection when there are multiple connections configured.
* UID - can be used instead of NameID as the user identifier.
* Email
* First name
* Last name
* Department - used to update the user's organization. This will attempt to match an organization by name and will move the user to that organization if found.
* Roles - used to update the user's roles in SmartSimple. This should be a comma delimited list of SmartSimple user roles (by name) to be assigned to the user.
* Language - used to specify the initial language displayed to the user. This should be an integer value that corresponds with a language ID value in SmartSimple (e.g. 1=English).
* RedirectURL - used to specify an initial landing page in SmartSimple. This should be a relative patch (e.g. /iface/ex/ax_index.jsp).
===SAML Assertion Example===
Lalaine Songalia
Smartstaff
1,390
edits
Retrieved from ‘https://wiki.smartsimple.com/wiki/Special:MobileDiff/37320’

Navigation menu