Security Assertion Markup Language (SAML) is an open standard used for authentication. OpsHub Integration Manager (OIM) supports SAML authentication, enabling users to log in using their own SAML credentials.
Let’s take a look at how SAML login server can be configured. In this video, we are using Okta as the login server, which is similar to Microsoft’s SAML login server. OpsHub users can also use other login servers which support similar functionalities.
The process begins with the user navigating to “Applications” in Okta to create a new SAML login application. Under General Settings, the user provides an application name and any additional information, if needed.
Next, under the “Configure SAML” section, the user enters the Single Sign-On (SSO) URL and Audience URI, as specified in the OpsHub documentation. Once these details are entered, the user clicks “Finish.”
With the setup complete, the user navigates to the Sign-On page in Okta to copy the Identity Provider metadata URL, which will be used to configure the SAML login server in OpsHub.
After signing into OpsHub Integration Manager, the user goes to “Administration” and selects “Login Server Management” to configure a new SAML login server. Here, the user provides a server name and pastes the Identity Provider metadata URL copied earlier.
Before saving the SAML login server configuration, the user ensures the “Test Connection Before Adding Server” toggle is enabled. The “Test Server Connection” option is then used to verify the details, and the configuration is saved.
Once the SAML configuration is complete, the user proceeds to “User Management” to create a user for SAML login. Along with mandatory inputs like name and username, the newly created SAML server details are provided.
The same user created in OIM will now have to get added in the Okta app as shown in the video. Finally, back in OpsHub Integration Manager, the user activates the SAML login server.
Let’s now see how users can log into OpsHub via SAML without needing to manually enter their ID and password.