Difference between revisions of "Updating SSO SAML Metadata Configuration"

From Hornbill
Jump to navigation Jump to search
 
(47 intermediate revisions by 3 users not shown)
Line 1: Line 1:
=Updating SSO SAML Metadata Configuration=
+
This documentation has been moved to: -
Customers who have configured their SAML metadata before March 2021 are required to update their SAML configuration due to changes made to Hornbills SAML metadata and service endpoints.  This necessary change to the redirect endpoint that your SSO service provider uses to authenticate SSO requests for Hornbill users is due to changes in the technology stack.  These changes remove reliance on legacy PHP code, favouring a modern front end architecture providing better performance and security.
 
  
A banner will appear within the Hornbill Admin tool for all customers required to make the change; no further action is necessary for those who do not receive the banner.
+
SSO Fundamentals
 +
* https://docs.hornbill.com/esp-fundamentals/security/single-sign-on
  
[[File:Sso_update.png|800px]]
+
SSO Configuration
 
+
* https://docs.hornbill.com/esp-config/security/sso/sso-with-saml
An exclamation mark in a yellow triangle highlights each affected SSO configuration identified using legacy SAML metadata endpoints.  Users can still log in successfully as we currently redirect the legacy endpoint to the new endpoint automatically.  However, updating the configuration will speed up the user login process for end-users and provide excellent reliability and security.
+
* https://docs.hornbill.com/esp-config/security/sso/single-sign-on
 
+
* https://docs.hornbill.com/esp-config/security/sso/auto-provisioning
==Updating the SSO Configuration==
+
[[Category:HDOC]]
# Open the Hornbill Admin Tool
 
# Navigate to the following page: '''Home > System > Security > SSO Profiles
 
===View the Metadata===
 
You can view the SAML metadata, and the values displayed used to update your SSO IDP manually.
 
 
 
# Click on the Metadata [[File:SAMLMetaDataButton.png|100px]] Button
 
#:<br>
 
#:[[File:SAMLUserMetaData.png]]
 
#:
 
# Select the tab for the service you are using SAML for in Hornbill
 
# Make a note of the '''Entity ID''' and '''Reply URL'''
 
 
 
===Download the Metadata===
 
Alternatively, you can download the metadata for each service and upload them to your SSO provider.
 
# Click on the Download button for the service you are using SAML for in Hornbill
 
# You can now manually update the '''Entity ID''' and '''Reply URL''' on your entity provider, or if supported, You can import the metadata data file.
 
 
 
To apply the metadata, you must refer to your Identity Providers documentation for the steps required. Further details can be found [[https://wiki.hornbill.com/index.php?title=Single_Sign_On_with_SAML_2.0#Configure_your_Identity_Provider here]]
 

Latest revision as of 20:49, 18 April 2024