{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Navigate to ","type":"text"},{"text":"/RoleManager","type":"text","marks":[{"type":"strong"}]},{"text":" URL then click the Authentication Providers menu.","type":"text"}]},{"type":"paragraph","content":[{"text":"RoleManager can integration to any external provider that supports:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OpenID Connect (oidc);","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OAuth;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ADFS;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SAML2.","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":70.0},"content":[{"type":"media","attrs":{"width":1905,"id":"9a4bffc3-2d94-4ae2-afc6-daa47e977a63","collection":"contentId-694616655","type":"file","height":800}}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Complete application registration in the respective authentication provider, e.g. configure redirect_URL, rely_party;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Request credentials for connecting to the authentication provider, e.g. client_id, client_secret;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Setup claims mapping at the authentication provider if required.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Adding an authentication provider","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the Create New button,","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the provider type from the dropdown; Select the \"Other\" type for source system that is only required to automatically map users;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter the name and display name of the provider. The name has to be unique and starts with a letter without space, e.g. Azure, then click the Next button;","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter the configuration JSON applicable for the authentication provider. See below list for the applicable provider.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the applicable status:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Is Interactive - RoleManager displays a button for each interactive provider on the log in page so the user can use the external account to log in;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Is Default - RoleManager automatically redirects the user to the default authentication provider's login page, i.e. the user does not need to select which provider to log on.","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"External authentication provider configuration requirement","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":1800.0,"localId":"0dd4d267-5968-4d30-a8bf-a4e6509fd340"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"Provider","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Type","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"Application Registration","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"paragraph","content":[{"text":"Information Required for RoleManager Configuration","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"RoleManager Configuration JSON","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"Azure AD","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"OpenID Connect","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"How to Configure Azure Active Directory for OneList","type":"text","marks":[{"type":"link","attrs":{"href":"https://iqxbusiness.atlassian.net/wiki/spaces/ONELIST70/pages/694616731"}}]}]},{"type":"paragraph","content":[{"text":"Redirect URI: ","type":"text"},{"text":"https:///rolemananger/signin-azure","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"Delegated API permissions:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Microsoft Graph","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Mail.Read","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"openid","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"profile","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"User.Read","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Azure tenant id","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Application id","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Client secret","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"clientid\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"clientsecret\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"Authority\": \"https://login.microsoftonline.com//v2.0\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"CallbackPath\": \"/signin-azure\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"\"UserNameClaim\": \"email\",","type":"text"},{"type":"hardBreak"},{"text":"\"SaveTokens\": false","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"}","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"Azure AD","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"SAML","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"Select this option when using Windows AD log in as OneList UserName. The prerequisite is ","type":"text"},{"text":"Azure AD Premium license.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#171717"}}]}]},{"type":"paragraph","content":[{"text":"Follow Azure SAML configuration instructions to","type":"text"},{"text":" Create Your Own Application","type":"text","marks":[{"type":"strong"}]},{"text":": ","type":"text"},{"text":"https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications"}}]}]},{"type":"paragraph","content":[{"text":"Identifier (Entity ID): ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"https://","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"Reply URL (Assertion Consumer Service URL): ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"https:///","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"rolemanager/saml-azure","type":"text","marks":[{"type":"textColor","attrs":{"color":"#323130"}}]}]},{"type":"paragraph","content":[{"text":"Required claim:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"User Unique Identifier (Name ID) - select the claim ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"applicable","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]},{"text":" for your ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"organization","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]},{"text":":","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"user.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"onpremisessamaccount - this is user's Windows AD login","type":"text","marks":[{"type":"textColor","attrs":{"color":"#171717"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"user.userprincipalname - ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"this is user's UPN","type":"text","marks":[{"type":"textColor","attrs":{"color":"#171717"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"user.mail - this is user's email address","type":"text","marks":[{"type":"textColor","attrs":{"color":"#171717"}}]}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Additional claims:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#171717"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"See ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://iqxbusiness.atlassian.net/wiki/spaces/ONELIST70/pages/3018653707"}},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"App Federation Metadata Url e.g. https://login.microsoftonline.com/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/federationmetadata/2007-06/federationmetadata.xml?appid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text"},{"type":"hardBreak"},{"text":"\"EntityId\": \" hostname>\",","type":"text"},{"type":"hardBreak"},{"text":"\"CallbackPath\": \"/saml-azure\"","type":"text"},{"type":"hardBreak"},{"text":"\"MetaDataUrl\":\"\"","type":"text"},{"type":"hardBreak"},{"text":"}","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"ADFS","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"ADFS","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"Registration steps: ","type":"text"},{"text":"https://docs.microsoft.com/en-us/aspnet/core/security/authentication/ws-federation?view=aspnetcore-2.2","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/aspnet/core/security/authentication/ws-federation?view=aspnetcore-2.2"}}]}]},{"type":"paragraph","content":[{"text":"Rely Party: https://","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"/","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}},{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"Map the SAMAccount-Name to the Name ID claim. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"Hint: use the Windows event log on the ADFS server to investigate errors, and the rely party above must end with '/'.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"Add rules to map claims:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"sAMAccountName => http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"sn => ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}},{"type":"link","attrs":{"href":"https://urldefense.com/v3/__http:/schemas.xmlsoap.org/ws/2005/05/identity/claims/surname__;"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"givenname => http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"mail => http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Metadata address, e.g. ","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"https://adfs.mycompany.com/FederationMetadata/2007-06/FederationMetadata.xml","type":"text","marks":[{"type":"link","attrs":{"href":"https://adfs.mycompany.com/FederationMetadata/2007-06/FederationMetadata.xml"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The name of ADFS authentication provider in RoleManager must be ","type":"text"},{"text":"WsFederation","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"MetadataAddress\": \"","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"","type":"text"},{"text":"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"Wtrealm\": \"https:///\"","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"}","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"Google","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"OpenID Connect","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"Registration steps: ","type":"text"},{"text":"https://developers.google.com/identity/protocols/OpenIDConnect","type":"text","marks":[{"type":"link","attrs":{"href":"https://developers.google.com/identity/protocols/OpenIDConnect"}}]}]},{"type":"paragraph","content":[{"text":"Redirect URL: ","type":"text"},{"text":"https:///rolemanager/signin-google","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"client id","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"client secret","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text"},{"type":"hardBreak"},{"text":"\"Authority\": \"https://accounts.google.com\",","type":"text"},{"type":"hardBreak"},{"text":"\"clientid\": \"\",","type":"text"},{"type":"hardBreak"},{"text":"\"clientsecret\": \"client secret\",","type":"text"},{"type":"hardBreak"},{"text":"\"CallbackPath\": \"/signin-google\",","type":"text"},{"type":"hardBreak"},{"text":"\"UserNameClaim\": \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress\",","type":"text"},{"type":"hardBreak"},{"text":"\"Scope\": [","type":"text"},{"type":"hardBreak"},{"text":"\"email\"","type":"text"},{"type":"hardBreak"},{"text":"]","type":"text"},{"type":"hardBreak"},{"text":"}","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"Salesforce","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"OpenID Connect","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"Create a connected app: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"https://developer.salesforce.com/docs/atlas.en-us.api_streaming.meta/api_streaming/code_sample_auth_oauth.htm","type":"text","marks":[{"type":"link","attrs":{"href":"https://developer.salesforce.com/docs/atlas.en-us.api_streaming.meta/api_streaming/code_sample_auth_oauth.htm"}}]}]},{"type":"paragraph","content":[{"text":"Callback URL: ","type":"text"},{"text":"https:///rolemanager/signin-salesforce","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"consumer key","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"consumer secret","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"Authority\": \"","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"text":"https://login.salesforce.com/","type":"text"},{"text":"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"ClientId\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"ClientSecret\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"CallbackPath\": \"/signin-salesforce\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"Scope\": [\"offline_access\",\"api\"]","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"}","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"Duo","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"SAML","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"Complete the Duo Application Registration","type":"text","marks":[{"type":"link","attrs":{"href":"https://iqxbusiness.atlassian.net/wiki/spaces/ONELIST70/pages/694616803"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"paragraph","content":[{"text":"From the \"XML metadata\" file of the Duo Access Gateway admin console:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SSO URL;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Entity ID;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Signing X509Certificate.","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text"},{"type":"hardBreak"},{"text":"\"EntityId\": \"","type":"text"},{"text":"https://","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}},{"type":"link","attrs":{"href":"http://localhost:8001/"}}]},{"text":"\",","type":"text"},{"type":"hardBreak"},{"text":"\"CallbackPath\": \"/signin-duo\",","type":"text"},{"type":"hardBreak"},{"text":"\"Provider\": {","type":"text"},{"type":"hardBreak"},{"text":" \"EntityId\": \"\",","type":"text"},{"type":"hardBreak"},{"text":" \"LoginEndpoint\": \"","type":"text"},{"text":"<","type":"text","marks":[{"type":"link","attrs":{"href":"https://duo.onelistapprovals.com/dag/saml2/idp/SSOService.php"}}]},{"text":"Duo SSO URL>\",","type":"text"},{"type":"hardBreak"},{"text":" \"X509Certificate\": \"\"","type":"text"},{"type":"hardBreak"},{"text":" }","type":"text"},{"type":"hardBreak"},{"text":"}","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[85.0]},"content":[{"type":"paragraph","content":[{"text":"SAP","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"OpenID Connect","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[466.0]},"content":[{"type":"paragraph","content":[{"text":"OpenID Connect registration: ","type":"text"},{"text":"https://help.sap.com/viewer/6d6d63354d1242d185ab4830fc04feb1/Cloud/en-US/8a0aa2ea5a0744879a7ec2be0bc023cf.html","type":"text","marks":[{"type":"link","attrs":{"href":"https://help.sap.com/viewer/6d6d63354d1242d185ab4830fc04feb1/Cloud/en-US/8a0aa2ea5a0744879a7ec2be0bc023cf.html"}}]}]},{"type":"paragraph","content":[{"text":"Callback URL: ","type":"text"},{"text":"https:///rolemanager/signin-sap","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[291.0]},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Client ID","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Secret","type":"text"}]}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[435.0]},"content":[{"type":"paragraph","content":[{"text":"{","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"Authority\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"ClientId\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"ClientSecret\": \"\",","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"\"CallbackPath\": \"/signin-sap\"","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]},{"type":"hardBreak"},{"text":"}","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}],"version":1}

Browser not supported