SAML group and role mapping

Overview

SD Elements now supports the mapping of SD Elements groups and roles to groups and roles that exist within a user’s SAML client.

Activating the Feature

To use the new SAML Group and Role mapping feature you will need to activate the feature flag.

Prerequisites
  • The user has the system super user permission.

  • The Advanced Single Sign On feature has been activated under from the gear icon menu under Features.

Steps

The following steps will walk you through activating the feature within your instance of SD Elements.

  1. Log in to SD Elements with super user credentials.

  2. From the gear icon menu, select Features.

  3. Check the box to the left of SAML Group/Role Onboarding

    300
  4. Click the Save button.

Configuring SAML Role Field in SD Elements SAML Form

Configuring this field to the SAML Role attribute Name on your SAML client will allow mapping of a user’s SAML role to an SD Elements role and assignment of that SD Elements role to that user.

If no role mappings are defined or if no roles are matched, new users will be assigned the organization’s default role.
Prerequisites
  • The user has the system super user permission.

  • A SAML Integration has already been configured, or you are configuring a new SAML integration. If you are configuring a new SAML integration and have the form open, skip to step 4.

Steps

The following steps will walk you through adding a SAML Role attribute name to your SAML configuration.

  1. Log in to SD Elements with super user credentials.

  2. From the gear icon menu, select Authentication.

  3. Hover over the SAML entry on the table and select the pencil icon on the right.

    authentication edit saml entry
  4. Within the form window, expand the Advanced Configuration section.

  5. Input the SAML Role Attribute name in the field under the heading SAML Attribute for Role Mapping

    300
  6. Click the Save or Save and Activate button.

Configuring SAML Group Field in SD Elements SAML Form

Configuring this field to the SAML Group attribute Name on your SAML client will allow mapping of a user’s SAML group to an SD Elements group and assignment of that SD Elements group to that user.

Prerequisites
  • The user has the system super user permission.

  • A SAML Integration has already been configured, or you are configuring a new SAML integration. If you are configuring a new SAML integration and have the form open, skip to step 4.

Steps

The following steps will walk you through adding a SAML Group attribute name to your SAML configuration.

  1. Log in to SD Elements with super user credentials.

  2. From the gear icon menu, select Authentication.

  3. Hover over the SAML entry on the table and select the pencil icon on the right.

    authentication edit saml entry
  4. Within the form window, expand the Advanced Configuration section.

  5. Input the SAML Group Attribute name in the field under the heading SAML Attribute for Group Mapping

    300
  6. Click the Save or Save and Activate button.

Create SAML Role Mappings

Prerequisites
  • The user has the system super user permission.

  • The SD Elements role you wish to map to must already exist on your instance.

Steps

The following steps will walk you through creating a SAML to SD Elements role mapping.

  1. Log in to SD Elements with super user credentials.

  2. From the gear icon menu, select Authentication.

  3. Click + Role Mappings on the SAML line item you wish to create the mapping for.

    authentication role mappings link
  4. Click the yellow + Role Mapping button on the top right area of the screen.

    authentication add role mapping fab
  5. In the pop up window, enter the name of the SAML Role that exists in the SAML client that you wish to be mapped.

  6. In the pop up window, search for the existing SD Elements role you wish to map to the specified SAML Role.

    authentication saml role mapping form
  7. If you wish to create multiple mappings you can click the Create and Add Another button, or Click the Create button to save your mapping and exit the form.

Create SAML Group Mappings

Prerequisites
  • The user has the system super user permission.

  • The SD Elements group you wish to map to must already exist on your instance.

Steps

The following steps will walk you through creating a SAML to SD Elements group mapping.

  1. Log in to SD Elements with super user credentials.

  2. From the gear icon menu, select Authentication.

  3. Click + Group Mappings on the SAML line item you wish to create the mapping for.

    authentication group mappings link
  4. Click the yellow + Group Mapping button on the top right area of the screen.

    authentication add group mapping fab
  5. In the pop up window, enter the name of the SAML Group that exists in the SAML client that you wish to be mapped.

  6. In the pop up window, search for the existing SD Elements Group you wish to map to the specified SAML Group.

    authentication saml group mapping form
  7. If you wish to create multiple mappings you can click the Create and Add Another button, or Click the Create button to save your mapping and exit the form.

results matching ""

    No results matching ""