Relying Party Configuration - Illumio RSA Ready SecurID Access Implementation Guide

Document created by RSA Information Design and Development on Jan 22, 2019
Version 1Show Document
  • View in full screen mode

This section contains instructions on how to integrate RSA SecurID Access with Illumio using Relying Party. Relying party uses SAML 2.0 to integrate RSA SecurID Access as a SAML Identity Provider (IdP) to Illumio SAML Service Provider (SP).

Architecture Diagram

RSA Cloud Authentication Service

Follow the steps in this section to configure RSA Cloud Authentication Service as a Relying Party SAML IdP to Illumio .

Procedure

1. Logon to the RSA Cloud Administrative Console and browse to Authentication Clients > Relying Parties and click Add a Relying Party.

3. Click the Add a Relying Party button on the My Relying Parties page.

4. From the Relying Party Catalog select the +Add button for Service Provider SAML.

5. Enter a name for the Service Provider in the Name field on the Basic Information page.

6. Click the Next Step button.

7. On the Authentication page, select RSA SecurID Access manages all authentication.

8. From the Primary Authentication Method pulldown, select your desired login method either Password or SecurID.

9. From the Access Policy pulldown select a policy that was previously configured.

10. Select Next Step.

11. Select Enter Manually.

12. Enter the Assertion Consumer Service (ACS) URL found on the Illumio’s Single Sign-On Configuration page.

13. Enter the Illumio Issuer in the Audience (Service Provider Entity ID) field.

14. Under IdP Signs select Entire SAML response.

15. Select Download Certificate.

16. Select Show Advanced Configuration. Under Attribute Extension add attributes Email Address, User.FirstName, User.LastName, and UserMemberOf.

17. Select Save and Finish.

18. On the My Relying Parties page, select the Edit pulldown and select View or Download IdP Metadata.

19. View the metadata file to find the Cloud IDP URL. Location=https://<company_id>.auth.securid.com/saml-fe/sso. This is the Cloud IDP URL.

20. Navigate to Users > Identity Sources.

Note: Perform the following steps to all Identity Sources used in the policy.

21. Select Edit for the Identity Source used in the Policy.

22. On the User Attributes page, verify that the Synchronize the selected policy attributes with the Cloud Authentication Service is checked.

23. In the Policies column verify that attribute mail, sn, givenName, and memberOf are checked.

24. Click Next Step.

25. Click Save and Finish.

26. On the top menu click Publish Changes.

Illumio

Follow the steps in this section to configure Illumio as a Relying Party SAML SP to RSA Cloud Authentication Service.

Procedure

1. Login into the Illumio administration console.

2. Navigate to Settings > Single Sign-On

3. Select SAML from the pulldown and then click Configure.

4. Click Edit.

5. Paste the Cloud certificate in the SAML Identity Provider Certificate field.

6. Enter the Cloud IDP URL in the Remote Login URL field.

7. Enter a Logout Landing URL (optional).

8. Click Save.

Configuration is complete.

Return to the main page for more certification related information.

 

Attachments

    Outcomes