Set SAML Single Sign-On Authentication for Users
Overview
SAML Single Sign-On (SSO) allows users to authenticate to CloudConnexa using an external identity provider (IdP), such as Okta, Microsoft Entra ID (Azure AD), OneLogin, or Ping Identity.
When SAML authentication is configured, CloudConnexa acts as the SAML Service Provider (SP) and redirects users to the configured IdP for authentication. After successful authentication, CloudConnexa can automatically create user accounts and assign user groups based on configured attribute mappings and user group mapping rules.
CloudConnexa supports:
SAML-based user authentication.
Automatic user provisioning at first sign-in.
User attribute mapping.
User group mapping based on SAML attributes.
Before you begin
Before configuring SAML authentication:
Ensure you have administrative access to your IdP.
Ensure your IdP supports SAML 2.0.
Identify the users or groups that should have access to CloudConnexa.
Gather the metadata required by your IdP and CloudConnexa.
Configure SAML SSO
To configure SAML SSO, follow these steps:
Sign in to your WPC's Administration portal by entering your Cloud ID in a web browser (for example,
company_name.openvpn.com).Navigate to Settings → User Authentication.
Select Edit.
Select SAML Single Sign-On.
Select Configure.
Configure your identity provider using the information provided in the CloudConnexa Metadata section.
Select Next.
Configure the attribute mappings used to map SAML attributes to CloudConnexa user fields.
Select Next.
Review the configuration, and select Confirm.
What happens next
After successful authentication:
CloudConnexa creates the user account if it doesn't already exist.
User attributes are populated from the SAML assertion according to the configured attribute mappings.
Any configured SAML user group mapping rules may be applied.
The user appears in Users → Users.