Single Sign On (SSO) Support in CentreStack via SAML

By -
When it comes to Single Sign On support via SAML, there are always two parties.

  • One is the IdP (the identity provider) 
  • and the other is SP (service provider).


In this documentation, the IdP will be a public IdP such as SSOCircle and the SP will be CentreStack. The SSOCircle is used as an example to set up the IdP, it can work with other IdP as well.

On the CentreStack side, it is a multi-tenant system and each tenant may want to have its own SSO service. So the Single Sign On is a per-tenant setting.

You can find the Single Sign On at the tenant manager section, under group policy and then "Single Sign On".


Step 1: Register CentreStack at IdP


IdP will need to register CentreStack as a service provider (SP) by importing the SP's meta data.
You will find the CentreStack's metadata at the following location (per-tenant setting).


We can use the following xml to register centrestack as an SP at SSOCircle.



Now at the SSOCircle, need to add a new service provider


In the next screen, we can paste in the xml from CentreStack side, set the FQDN to the URL contained within the XML, and check the 3 parameters, the FirstName, LastName and Email.


Now the SSOCircle side of the registration is done.

Step 2: Register SSOCircle at CentreStack side.


The IdP registration and SP registration is a two-way I trust you and now you trust me kind of manual setup.


The meta data from the SSOCircle look like this and it can be imported to CentreStack.


Inside the meta data from SSOCircle, you will see there is a HTTP-Redirect URL, that will be the URL we use to register the IdP. And also register the 3 paramaters (FirstName, LastName, EmailAddress) from the IdP.


Step 3: Login at the IdP, but use service at SP

As the summary, the IdP and SP register each other's meta data, register each other's URL and parameters. After that, it will be single signon at the IdP side. The login will be at the IdP side, and after login, it will redirect back to the SP side.


Comments

Post a Comment

Popular posts from this blog

Access and Backup to HP Cloud Storage

By -
Image
Today HP moved its cloud services to public beta. Gladinet has been working closely with HP Cloud Service since private beta to provide product integration support. Gladinet is also announcing today the support of HP Cloud Storage service with the full Gladinet Suite of products. In the latest Gladinet Desktop Client, you will see the HP Cloud drop down, which allows you to attach your HP Cloud Storage account into Windows Explorer as a mapped network drive. At the next screen, you can enter the related HP Cloud account information.
Read more

7 Biggest Limitations of SharePoint Online And How to Fix Them

By Anonymous -
Image
SharePoint benefits encourage businesses to migrate their file server data online. However, there are at least 7 limitations of SharePoint Online and OneDrive that need to be effectively addressed to reduce migration costs and eliminate OneDrive sync failures. In this article, we'll identify some of the common issues that complicate SharePoint migrations and ways to simplify the migration and solve the issues. Here's a list of common issues: 5,000 item limit in a document library 100,000 item sync limit for the OneDrive client NTFS permission reorganization requirements Maximum name length limitations Prohibitive costs of data reorganization 93 day recycle bin threshold Lack of support for legacy application data (databases, etc…) Obviously, you may not hit every issue in each migration but migrator beware if there's a lack of awareness of how these limitations could impact user experience, productivity, and cost. A Real-World Example Before we discuss each of these items...
Read more

Optimizing 3D Rendering and AutoCAD Performance in Remote Work Environments

By -
Image
Introduction: The Challenge of Remote Work Whether you are a design company or an architecture firm , you'll find that managing large 3D and AutoCAD files across remote team members creates performance and collaboration issues. This article introduces CentreStack as the one-stop solution for transforming your remote work experience. Identifying the Obstacles in Remote 3D Rendering and AutoCAD Usage The Challenge of Distance Data must traverse long distances when working in separate locations, introducing latency issues that hamper real-time collaboration. The Burden of Growing Files Technological advancements in 3D rendering tools and AutoCAD have led to larger file sizes, making performance even more of a challenge. The Downside of VPNs and Cloud Storage Solutions Traditional VPN technology has become more sluggish over time despite hardware upgrades or additional bandwidth. Common cloud services like Dropbox, Google Drive, and SharePoint aren't optimized for AutoCAD file typ...
Read more