Previous Topic: How Single Sign-On Support for SAML 2.0 WorksNext Topic: Preparing the IdP Agreement


How to Set Up SAML Authentication

To enable SAML 2.0 authentication in Single Sign-On, the administrator must perform the following procedures:

  1. Following the guidelines specific to the Identity Provider (IdP), create a metadata file that establishes the agreement between the IdP and Single Sign-On.

    For more information, see Prepare the IdP Agreement.

  2. (Optional) Create a properties file to enable digital signatures and encryption for communications between the IdP and servers running CA software.

    For more information, see Preparing the Security Properties File.

  3. Use the Single Sign-On Configuration Tool to set parameters for SAML Authentication.

    For more information, see Configure SAML Support in Single Sign-On.

  4. Set parameters on the IdP server. For example, add all data source product websites that support SAML to the list of trusted sites.

    For more information, see Configure the IdP.

  5. Update user accounts in CA Performance Center Administration to add an instruction to use external authentication.

    For more information, see Complete SAML Setup.