{"type":"doc","content":[{"type":"paragraph","content":[{"text":"As every IdP is different we can not provide a guide for every solution. ","type":"text"}]},{"type":"paragraph","content":[{"text":"However we can give some general configuration parameters thats required for the SAML 2 integration to work.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Our SAML AuthNRequest","type":"text"}]},{"type":"paragraph","content":[{"text":"AssertionConsumerServiceURL=","type":"text"},{"text":"https://DAMURL/DigizuiteCore/LoginService/Saml2/Acs","type":"text","marks":[{"type":"link","attrs":{"href":"https://DAMURL/DigizuiteCore/LoginService/Saml2/Acs"}}]}]},{"type":"paragraph","content":[{"text":"Issuer (Also called entity ID) = ","type":"text"},{"text":"https://DAMURL/DigizuiteCore/LoginService","type":"text","marks":[{"type":"link","attrs":{"href":"https://DAMURL/DigizuiteCore/LoginService"}}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"An example our our saml2p:AuthnRequest","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\thttps://mbdc.dev.digizuite.com/DigizuiteCore/LoginService\n","type":"text"}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Token Claims","type":"text"}]},{"type":"paragraph","content":[{"text":"The attributes we require in the ","type":"text"}]},{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name","type":"text","marks":[{"type":"code"}]},{"text":" (The unique name of the user could be UPN)","type":"text"}]},{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress","type":"text","marks":[{"type":"code"}]},{"text":" (Email)","type":"text"}]},{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname","type":"text","marks":[{"type":"code"}]},{"text":" (Surname)","type":"text"}]},{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname","type":"text","marks":[{"type":"code"}]},{"text":" (Given name)","type":"text"}]},{"type":"paragraph","content":[{"text":"http://schemas.xmlsoap.org/claims/Group","type":"text","marks":[{"type":"code"}]},{"text":" (List of group memberships in order to connect groups directly)","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Example of the ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n \n mb@digizuite.app\n \n \n mb@digizuite.com\n \n \n Boisen\n \n \n Morten\n \n \n digizuite\\Domain Users\n digizuite\\Super administrator\n S-1-5-21-2750658348-810332529-726732757-513\n S-1-5-21-2750658348-810332529-726732757-1106\n \n ","type":"text"}]},{"type":"paragraph","content":[{"text":"Note its important that the “Name” attribute is the whole URL!","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Example of a complete ","type":"text"},{"text":"samlp:Response","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph"},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n http://ad-host.digizuite.app/adfs/services/trust\n \n \n \n \n http://ad-host.digizuite.app/adfs/services/trust\n \n \n \n \n \n \n \n \n \n \n mTY/O/ujMR/6s+/VoRqVMfKG47QtXxl1puSB05/6GOU=\n \n \n QQhk5ARL7jhhgLF/qu0UOx9ZrvYjRUfDgHx2ZVft0vmnekE9EojR7onh4RfZX/sY/mRn/y4ovx9WbjoP2KXSjJ+ZeiUt590bo1WgqkhUujszWEOpxJSjXBo1TVj7yVrNET+a1pA5KVlGy+s5e/fHRYD1Rzvue+LSR6ZuMeBXGJyCM+iWCaNqS5Co7WIGxP6E35BXY+tgQSXz8dCSoRqdQppcsl+kfIC5wIKYGp529Y1Pmyr5jsnKQYZbKxTo0g3tVkYQLK93svGNLlPLuEm5bqjC5hrfeCAbEXPbZRVe9KuYwIJg1FU20HWllSOb2uMsuVXQs1Swn9creZIXTemZVg==\n \n \n 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\n \n \n \n \n \n \n \n \n \n \n https://mbdc.dev.digizuite.com/DigizuiteCore/LoginService\n \n \n \n \n mb@digizuite.app\n \n \n mb@digizuite.com\n \n \n Boisen\n \n \n Morten\n \n \n digizuite\\Domain Users\n digizuite\\Super administrator\n S-1-5-21-2750658348-810332529-726732757-513\n S-1-5-21-2750658348-810332529-726732757-1106\n \n \n \n \n urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport\n \n \n \n","type":"text"}]},{"type":"paragraph"},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"Note we do not support the SHA1 encryption: ","type":"text"}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"When the IdP has been configured correctly then get the Metadatafederation url for next step. ","type":"text"}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":2},"content":[{"text":"Setup of Media manager","type":"text"}]},{"type":"paragraph","content":[{"text":"Login to the media manager with a Super administrator.","type":"text"}]},{"type":"paragraph","content":[{"text":"Go to “Settings” - “General settings” - “SSO“","type":"text"}]},{"type":"paragraph","content":[{"text":"Select SAML2","type":"text"}]},{"type":"paragraph","content":[{"text":"Insert a Template member user ID. You can use the guest user if you want low access: 30006 (Or you can create a template user that matches your need)","type":"text"}]},{"type":"paragraph","content":[{"text":"Select the Sync level","type":"text"}]},{"type":"paragraph","content":[{"text":"Enter a name","type":"text"}]},{"type":"paragraph","content":[{"text":"In the Entity ID you insert the same URL as you used for you redirect URI (","type":"text"},{"text":"https://DAMURL/DigizuiteCore/LoginService","type":"text","marks":[{"type":"link","attrs":{"href":"https://damurl/DigizuiteCore/LoginService"}}]},{"text":")","type":"text"}]},{"type":"paragraph","content":[{"text":"Signing behavior:","type":"text"}]},{"type":"paragraph","content":[{"text":"IfIdpWantAuthnRequestsSigned","type":"text"}]},{"type":"paragraph","content":[{"text":"Under Identity providers enter","type":"text"}]},{"type":"paragraph","content":[{"text":"Entity ID: Open the Metadata federation URL. It will have your Entity ID","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center"},"content":[{"type":"media","attrs":{"width":1381,"id":"67178b8a-28f1-4014-8fd5-8639a54837bb","collection":"contentId-2493022281","type":"file","height":390}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":"Metadata location: The federation metadata URL","type":"text"}]},{"type":"paragraph","content":[{"text":"Now Press Save and then Activate.","type":"text"}]},{"type":"paragraph","content":[{"text":"Once it says “Latest is active” the SSO configuration is enabled","type":"text"}]},{"type":"paragraph","content":[{"text":"Example of a configuration:","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center"},"content":[{"type":"media","attrs":{"width":500,"id":"bae4c10f-dbaa-42a0-962f-e246176602ab","collection":"contentId-2493022281","type":"file","height":861}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Setup of Sync groups in the DAM","type":"text"}]},{"type":"paragraph","content":[{"text":"If you have selected FullSync or AddOnly in your Group sync level you will need to setup your group binding in the DAM.","type":"text"}]},{"type":"paragraph","content":[{"text":"You will need to Login with a super administrator and go to:","type":"text"}]},{"type":"paragraph","content":[{"text":"System tools- Users and groups - Groups","type":"text"}]},{"type":"paragraph","content":[{"text":"Find the group you want to bind and do the following:","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":100.0},"content":[{"type":"media","attrs":{"width":2126,"id":"67ef23e5-251a-4ecc-9880-d93f41ac61fd","collection":"contentId-2493022281","type":"file","height":983}}]},{"type":"paragraph","content":[{"text":"In the Binding group name you can input either the domain/groupname or the group SID.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Setup of connectors or media manager:","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://digizuite.atlassian.net/wiki/spaces/DD/pages/2887188497"}},{"text":" ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Troubleshooting and known issues:","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://digizuite.atlassian.net/wiki/spaces/DD/pages/2887090195"}},{"text":" ","type":"text"}]}],"version":1}

Browser not supported