SAML

Navigate to Settings section and click on the User Authentication tab

Click on the Edit button positioned on the top right

Click on the Configure button under the SAML option

The SAML Configuration web page opens in a new browser window/tab and show the information needed to configure CloudConnexa as a Service Provider in your Identity Provider

On the Active Directory main page click on Enterprise application option.

Click on the New application button

Select the non-gallery application option in the Add your own app section

Provide name for your app and click Add. On the home page of your app, select the Set up single sign on option.

Then choose SAML option. On the Set up Single Sign-On with SAML page click on the Edit icon and:

Scroll down the page to SAML Signing Certificate section. In this section you can copy the link shown in the App Federation Metadata URL field this will be needed later

Azure Active Directory will only provide the NameID value to the Service Provider by default which CloudConnexa will map to the username of the User. If you want CloudConnexa to have more information about the User and to use the value of a specific User attribute to map the User into a CloudConnexa User Group, you need to configure parameters to be sent from Azure Active Directory to App. You can do that by filling in the User Attributes & Claims section of your App

Now that CloudConnexa has been set up as an application, you need to provide applicable Users access to CloudConnexa application by doing the following:

Click on the Next button

Provide an Idp Name, Select IdP Metadata URL, and paste the App Federation Metadata URL value copied earlier in step ‘2.f’ into the IdP Metadata URL text field

If earlier in step ‘2.g’ you had set up additional parameters to map into CloudConnexa User information, do the following or else click on the Next button:

Click on the Finish button after reviewing the SAML configuration

Now that the SAML configuration is done, we need to enable SAML as the User authentication method by clicking on the Edit button in the User Authentication tab

Select the SAML option

If earlier in step 2.g’you had setup an additional parameter with the intention to map the value of that parameter to OpenVPN Cloud User Group, do the following or else click on the Update Settings button:

Click the Confirm button on the confirmation dialog

SAML is now enabled

Navigate to Settings section and click on the User Authentication tab.

Click on the Edit button positioned on the top right.

Click on the Configure button under the SAML option.

The SAML web page opens and shows the information needed to configure CloudConnexa as a Service Provider in your Identity Provider.

Click on the menu and navigate to Apps > Web and mobile apps, then Add App "Add custom SAML app".

Then, follow this 4 step procedure:

Step 1. Enter an App name with a description, and click Continue.

Step 2. Here, you'll find the Identity Provider (IdP) information needed later to configure CloudConnexa. Download the IdP Metadata file. Click Continue.

Step 3. Provide the Service Provider Details:

Step 4. Attribute Mapping. Google IdP will only provide the NameID attribute to the Service Provider by default, which CloudConnexa will map to the username of the User. If you do not want CloudConnexa to have more information about the User and to use the value of a specific User attribute configuration, you can skip this step. Click the Finish button.

Now that CloudConnexa has been set up as an application, you can assign it to all Users. Access the created SAML App (Apps > Web and mobile apps. Select the created App), Under "User Access" select "ON for everyone", then click Save.

Click on the Next button.

Provide an IdP Name. Select IdP Metadata XML, and do the following:

If earlier in step ‘2.b of Step 4′ you set up additional parameters to map to the CloudConnexa User information, do the following or else click on the Next button:

Under SAML, click the View Group Mapping button.

Click the "+" button to add Rule.

Enter into the SAML IdP User Group(s) field one or more of the values that will be present in the IdP provided parameter that you mapped to the Group attribute in step "3.c.ii", and select the corresponding parameters you want those values to map into. For example, the IdP User's department value of 'DEV' could map to CloudConnexa User Group 'Dev' which has been configured to provide access to resources for developers. Repeat the step to add more rules as desired and click on the Update Settings button when done.

Navigate to Settings section and click on the User Authentication tab.

Click on the Edit button positioned on the top right

Click on the Configure button under the SAML option

The SAML Configuration web page opens in a new browser window/tab and shows the information needed to configure CloudConnexa as a Service Provider in your Identity Provider.

Navigate to Applications tab, Add Application and click on the Create New App button.

Select Platform as Web and SAML 2.0 as Sign on method then click on the Create button.

Provide an Application Name and click on the Next button. In the General tab:

On the last page, select I'm an Okta customer adding an internal app, and click on the Finish button.

Click on the Sign On tab and click on the View set up Instructions button.

The X.509 Certificate and the Identity Provider Single Sign-On URL will be needed later. Copy and paste this information for use later or keep this browser window open.

Now that CloudConnexa has been set up as an application, you need to provide applicable Users access to CloudConnexa application. Click on the Assignment tab of the application and assign it to applicable Users or select the User and assign the application.

Okta will only provide the NameID value to the Service Provider by default which CloudConnexa will map to the username of the User. If you want CloudConnexa to have more information about the User and to use the value of a specific User attribute to map the User into a CloudConnexa User Group, you need to configure parameters to be sent from Okta to App See, https://help.okta.com/en/prod/Content/Topics/Users-groups-profiles/usgp-map-attributes.htm. In addition, refer to this support document.

Click on the Next button

Provide an IdP Name Select Manual Configuration, and do the following:

If earlier in step ‘2.h you had set up additional parameters to map into CloudConnexa User information, do the following or else click on the Next button:

Click on the Finish button after reviewing the SAML configuration

Now that the SAML configuration is done, we need to enable SAML as the User authentication method by clicking on the Edit button in the User Authentication tab

Select the SAML option

If earlier in step ‘2.h’ you had set up an additional parameter with the intention to map the value of that parameter to CloudConnexa User Group, do the following or else click on the Update Settings button:

Click the Confirm button on the confirmation dialog

SAML is now enabled

Navigate to Settings section and click on the User Authentication tab

Click on the Edit button positioned on the top right

Click on the Configure button under the SAML option

The SAML Configuration web page opens in a new browser window/tab and show the information needed to configure CloudConnexa as a Service Provider in your Identity Provider

Navigate to Applications tab and click on the Add App button

Enter SAML Test Connector (Advanced) in the search bar to find the application and click on it

Provide a Display Name and click on the Save button to add the application and start configuring it

Navigate to Configuration

Enter the Issuer Name displayed in the SAML Configuration web page of CloudConnexa into Audience (Entity ID) input field of OneLogin

Enter the SSO URL displayed in the SAML Configuration web page of CloudConnexa into both the ACS (Consumer) URL Validator and ACS (Consumer) URL input fields of OneLogin

Select Assertion as the drop-down list value for the SAML signature element field and click on the Save button

OneLogin will only provide the NameID value to the Service Provider by default which CloudConnexa will map to the username of the User. If you want CloudConnexa to have more information about the User and to use the value of a specific User attribute to map the User into a CloudConnexa User Group, you need to configure additional parameters to be sent by navigating to the Parameters tab and clicking on the Add (+ icon)

Click on the Include in SAML assertion checkbox, provide a Field Name, and click on the Save button

Choose and select a Value that is one of the attributes of the User. You can search for the attribute too.

Click on the Include SAML assertion checkbox and click on the Save button

Repeat the above process for adding more parameters that will correspond to the username, email, first name, last name, and User Group of CloudConnexa User. Once done, navigate to the SSO tab

Click on the copy/paste icon next to the Issuer URL in order to copy the value in the field. This will be used later in the CloudConnexa configuration.

Now that CloudConnexa has been set up as an application, you need to provide applicable Users access to CloudConnexa application. One of the ways to do this is to:

Click on the Next button

Provide an IdP Name and paste the Issuer URL value copied earlier in step ‘2.m’ into the IdP Metadata URL

If earlier in step ‘2.h’ you had set up additional parameters to map into CloudConnexa User information, do the following or else click on the Next button:

Click on the Finish button after reviewing the SAML configuration

Now that the SAML configuration is done, we need to enable SAML as the User authentication method by clicking on the Edit button in the User Authentication tab

Select the SAML option

If earlier in step ‘2.h’ you had set up an additional parameter with the intention to map the value of that parameter to CloudConnexa User Group, do the following or else click on the Update Settings button:

Click the Confirm button on the confirmation dialog

SAML is now enabled