Chatee ahora con Soporte
Chat con el soporte

Cloud Access Manager 8.1.2 - How To Configure as an Identity Provider

Setting up the front-end authenticator in sp-cam.demo.local

To set up the front-end authenticator in sp-cam.demo.local
1
Log in to the Dell™ One Identity Cloud Access Manager instance on sp-cam.demo.local as the fallback administrator.
2
From the main menu in the Front-end Authentication section, click + Add New.
3
On the Authenticator Type page choose SAML Federated.
4
Click Next. On the SAML Trust Settings page, upload the Federation metadata file which you downloaded from the Federation Settings page of the Application Configuration wizard. Please refer to step 15 of Configuring the SAML application manually in the section Configuring the SAML application on idp-cam.partner.local for details.
5
We have used metadata to configure our Service Provider so there is no need to enter an IDP Login URL, IDP Logout URL or import the Identity Provider (IDP) public certificate manually. This information is loaded automatically when the metadata file is imported.
6
The User Identity Claims page is displayed. Here you can specify how Cloud Access Manager will uniquely identify users and derive the display name of users from this IDP. In this example, we allow both to default to Use the Subject.

7
In the Authenticator Name field enter CAM IDP.
8
Click Finish.
9
The federation settings for the Service Provider are displayed.
10
The Cloud Access Manager Identity Provider is now configured. You may want to configure the roles for the FEA at this point to control user access to applications. If so, click Edit Roles and carry out the remaining steps, otherwise click Finish.
11
If you have followed the instructions in the section Configuring Cloud Access Manager roles to be returned then the roles from the IDP will be available when logging in using the newly created FEA. The Admin and Users roles will work automatically, any other roles you have created on the IDP you will have to add manually. To start, click Add Role.
12
In the Edit Role section enter a name and description for the role.
13
Click Add User.
14
Select the new FEA from the User’s Authenticator list if it is not already selected.
15
Edit the Include users with a claim named field to contain urn:dell/cam/role. This is the claim type for roles returned from the IDP.
16
In the Having value field enter the name of the role as defined in the IDP roles, for example if you have created a role on the IDP with the name Sales, then you should enter Sales here.
17
Click Save.
18
Repeat steps 11 to 17 for any additional roles that are required.

Testing your configuration

You have now configured both Dell™ One Identity Cloud Access Manager instances. When users attempt to access sp-cam.demo.local they are redirected to idp-cam.partner.local for authentication.

To test the configuration
1
Log onto any machine in the idp-cam.partner.local forest.
Open a browser and navigate to the Cloud Access Manager application portal on sp-cam.demo.local https://sp-cam.demo.local/CloudAccessManager
2
The browser is redirected to the Identity Provider’s log in page. Enter the credentials for a user defined in the idp-cam.partner.local forest.
3
The user is authenticated by the Identity Provider. If the authentication is successful, the browser is redirected to sp-cam.demo.local and the Application Portal is displayed.

Legal notices

Copyright 2016 Dell Inc. All rights reserved.

This product is protected by U.S. and international copyright and intellectual property laws.

This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Dell Inc.

The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document.

If you have any questions regarding your potential use of this material, contact:

Dell Inc.
Attn: LEGAL Dept
5 Polaris Way
Aliso Viejo, CA 92656

Refer to our web site (quest.com) for regional and international office information.

Trademarks

Dell, the Dell logo and Dell™ One Identity Cloud Access Manager are trademarks of Dell Inc. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others.

Legend

 

CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.

IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación