SETUP GUIDE FOR CENTIFY AS IdP

STEP 1:

• Log into Centrify as an Administrator and go to Apps from the NavBar.

• Click on Add Web Apps

STEP 2:

• In the pop-up, click on custom tab and then click on the Add button next to SAML.

STEP 3:

• In the new SAML App that you created under Application Settings section fill the Assertion Consumer Service URL as:

ACS (AssertionConsumerService) URL from Step1 of the plugin under Identity Provider Tab.


• Under User Access section select roles that can access this app:

• Under Advanced section pass the following parameters to the functions in the code:

setAudience()	SP-EntityID / Issuer from Step1 of the plugin under Identity Provider Tab. E.g: setAudience('http://localhost/wordpress/wp-content/plugins/miniorange-saml-20-single-sign-on/')
setRecipient()	Recipient URL from Step1 of the plugin under Identity Provider Tab. E.g: setRecipient('http://localhost/wordpress/')
setHttpDestination()	Destination URL from Step1 of the plugin under Identity Provider Tab. E.g: setHttpDestination('http://localhost/wordpress/')
setRelayState()	Default Relay State from Step1 of the plugin under Identity Provider Tab. E.g: setRelayState('http://localhost/wordpress/')

STEP 4:

• Under Application Settings section scroll down to Identity Provider Info. Keep this information handy for configuring the plugin.
• Click on Download Signing Certificate to download the Signing certificate.
• Go to Service provider Tab in miniOrange SAML Plugin and enter the following details:

Identity provider Name:	Centrify
SAML Login URL	Identity Provider Sign-in URL from Identity Provider Info in your Centrify SAML APP.
IdP Entity ID or Issuer	Issuer from Identity Provider Info in your Centrify SAML APP.
X.509 Certificate	Copy and Paste the certificate value from the .cer file.
Response Signed	Checked
Assertion Signed	UnChecked