Page Comparison

...

Author: Alex Torras (Unlicensed)

1.1. Create SAML IdP

1. Go to Security → Identity providers

2. Select Add identity provider

3. Select SAML 2.0 IdP and then Next

4. In the Configure SAML 2.0 IdP section:

   1. Enter a Name

   2. In IdP username select idpuser.subjectNameId

   3. In IdP Issuer URI enter https://{$ENV_FQDN}:443/api/saml/metadata

   4. In IdP Single Sign-On URL enter https://{$ENV_FQDN}:443/api/saml/SSO

   5. In Destination enter https://{$ENV_FQDN}):443/api/saml/SSO

5. Select Finish

...

1.2. Create SAML Application

1. Go to Applications → Applications

2. Select Create App Integration

3. Select SAML 2.0 and then Next

4. Enter an App name and select Next

5. In the Configure SAML section:

   1. In Single sign-on URL, DO NOT uncheck the Use this for Recipient URL and Destination URL, and enter https://{$ENV_FQDN}:443/api/saml/SSO

   2. In Audience URI (SP Entity ID) enter https://{$ENV_FQDN}:443/api/saml/metadata

   3. In Attribute Statements enter one for each claim declared in abiquo.properties. Follow this table as an example:

...

6. Select Next and Finish.

7. Download the Metadata details from the Sign On tab: open the URL, right click, and save as idp_metadata.xml.

...

1.3. Configure User claims

1. Go to Directory → People.

2. Select the user you want to configure

3. Select Assign Applications

4. Select Assign on the SAML Application previously created

5. Select Save and Go Back and Done

6. Select Profile tab

7. Select Edit and in attributes enter the following

   1. Username:  the givenname

   2. First Name: the name

   3. Last Name: the surname

   4. Primary email: the email

   5. Title: the abq-role (the external role configured in your environment)

   6. Department: the abq-enterprise (the enterprise you want the user to sign in in your environment)

8. Select Save

...

1.4. Configure Abiquo

1. Create the abq-enterprise that you want the user to sign in to.

2. Create the role and for the External roles, enter the abq-role that you want to assign to the user.

3. On the Abiquo Server, configure the abiquo.properties file :

...