• Home
• Login with External IDP
• CyberArk as IDP

Configure CyberArk as SAML IDP for SSO

---

miniOrange Identity Broker service solution enables cross protocol authentication. You can configure CyberArk as an IDP for Single Sign-On (SSO) into your applications/websites. Here, CyberArk will act as an Identity Provider (IDP) and miniOrange will act as a broker.

We offer a pre-built solution for integrating with CyberArk, making it easier and quick to implement. Our team can also help you set up CyberArk as SAML IDP to login into your applications.

Follow the Step-by-Step Guide given below for CyberArk Single Sign On

1. Configure miniOrange as Service Provider in CyberArk

• Go to miniOrange Admin console and navigate to Identity Providers in the left navigation menu. Then, click on Add Identity Provider button.



• In Choose Identity Provider, select SAML from the dropdown.



• Search for CyberArk in the list. If you don't find it, search for SAML Provider and set up your application there.



• Now click on the Click here link to get miniOrange metadata as shown in Screen below.



• For SP - Initiated SSO section, select Show Metadata Details.



• Click on Downlaod Metadata. Keep them handy. We'll use these to configure miniOrange as a Service Provider in CyberArk next.



• Now login with your CyberArk Administrator credentials.



• Navigate to the Web Apps under Apps.



• Click on Add Web Apps.



• Click on Custom button, select SAML app and click on Add.



• Click on Yes to add SAML app.



• Under Settings, enter the following:

  Name	Enter a label for Service Provider.
  Description	Enter description for your application.
  Logo	Enter logo for your application.




• Click on Trust and click on the Download Metadata File. Keep this downloaded metadata file. We'll need it for Step 2.



• Upload the miniOrange metadata by clicking on Choose File. Click on Save.



• To assign user to your application , click on Permissions and click on Add.



• Search for User, Group, or Role to assign user for the application and perform SSO.



• Click on Add button.

2. Configure CyberArk as Identity Provider in miniOrange

• Return to the miniOrange Admin Console tab you kept open from Step 1.
• On the Metadata tab, click the Click here link to configure your IDP.



• Click on Import IDP Metadata button.



• Enter IDP Name. Select File radio button and upload the CyberArk metadata downloaded in Step 1.
• Click on Import.



• To auto-fill all the details, scroll to the bottom and click Save to complete the CyberArk IDP configuration.

3. Test Connection

• Visit your Login Page URL.
• Go to Identity Providers tab.
• Search for your app, click the three dots in the Actions menu, and select Test Connection against the Identity Provider (IDP) you configured.



• On entering valid CyberArk credentials (credentials of user assigned to app created in CyberArk), you will see a pop-up window which is shown in the below screen.



• Hence your configuration of CyberArk as IDP in miniOrange is successfully completed.

Configure Attribute Mapping

• Go to Identity Providers.
• Click the three dots in the Actions menu, and select Attribute Mapping against the Identity Provider (IDP) you configured.

• Attribute Type - USER
• Attribute Type - EXTERNAL

Maps information, such as email and username, during Just-In-Time (JIT) user creation. Email and Username attributes are necessary to create the user profile.

• Click on the + Add Attribute button to add the attribute fields.



• Check the attributes in the Test Connection window from the previous step. Choose any attribute names you want to send to your application under Attribute Name sent to SP.
• Enter the values of the attributes coming from IdP into the Attribute Name from IdP field on the Xecurify side.

EXTERNAL mappings help alter incoming attribute names before sending them to apps, ensuring that the data is in the correct format.

• Click on the + Add Attribute button to add the attribute fields.



• Check attributes in test connection window from last step. Enter the attribute names (any name) that you want to send to your application under Attribute Name sent to SP.
• Enter the value of attributes that are coming from IdP into the Attribute Name from IdP field on the Xecurify side.