AuthAnvil as IdP – SAML

Step 1: Set Up AuthAnvil as Identity Provider

    AuthAnvil SAML SSOPrerequisites:
    • Copy these values from the Service Provider Info tab of the SAML plugin.
          1. SP Entity ID
          2. ACS URL
    AuthAnvil SAML SSO Instructions:
      1. Login to Authanvil and Go to SSO Manager +(add icon) and select Custom Application.
        2. SAML Single Sign On (SSO) using AuthAnvil Identity Provider, Add new application
      2. Enter the Application Name.
        3. SAML Single Sign On (SSO) using AuthAnvil Identity Provider, App Configuration
      3. Go to Protocol Type and Enter following info:
        4. Protocol Type SP-INIT
        Assertion Consumer Service URL ACS URL copied from the plugin
        Allow Multiple Audiences Unchecked
        Identity issuer SP Entity ID copied from the plugin
        Service Entity ID SP Entity ID copied from the plugin

        SAML Single Sign On (SSO) using AuthAnvil Identity Provider, Application configuration
      4. Enter Advanced Settings.
        5. Include All Audience URIs Checked
        Sign Token Response Checked
        Sign Assertion Unchecked
        Signing Algorithm SHA1

        SAML Single Sign On (SSO) using AuthAnvil Identity Provider, Advanced Settings
      5. Go to Attribute Transformation Tab and select Specify custom attribute transform. Add the NameID attribute and click on Add. Then add the name attribute as given in the image.
        6. SAML Single Sign On (SSO) using AuthAnvil Identity Provider, Attribute Transformation
      6. Click on Add Application .
      7. Go to Permissions tab and add Groups to which you want to give access to this application.
        8. SAML Single Sign On (SSO) using AuthAnvil Identity Provider, Group Access
      8. Click on Save Changes.
      9. Open the app. Click on View Federation Metadata in Protocol Type Tab and save the generated metadata xml file. This metadata file will be required to configure the plugin.
        10. SAML Single Sign On (SSO) using AuthAnvil Identity Provider, View Federation Metadata