This article describes how to integrate ADP with RSA Cloud Authentication Service (CAS) using My Page SSO.

Configure CAS

Perform these steps to configure CAS using My Page SSO.
Procedure

1. Sign in to the RSA Cloud Administration Console and navigate to Applications > Application Catalog.
2. Search for ADP and click Add to add the connector.
   
3. On the Basic Information page, choose Cloud.
4. Provide a name for the application in the Name field and click Next Step.
   
5. On the Connection Profile page, choose IdP-initiated.
   
6. Choose Enter Manually as the Data Input Method and provide the following details:
   1. Assertion Consumer Service (ACS) URL: This value will be provided by ADP.
   2. Service Provider Entity ID: This value will be provided by ADP.
   3. Identity Provider Entity ID: Select the default value if not already selected.
   4. Audience for SAML Response: Select the default value if not already selected.
   5. Under SAML Response  Protection of the Message Protection section, choose IdP signs assertion within response.
   6. In the User Identity section, select Auto Detect as the Identifier Type and Property values.
   7. In the Statement Attributes section, provide PersonImmutableID as the Attribute Name. This is the identifier ADP uses to authenticate users, which is a SAML attribute that should have the value of employee ID. 
   8. Default Relay State: This value will be provided by ADP.
7. Click Next Step.
8. Choose your desired Access Policy for this application and click Next Step.
9. Make desired changes on the Portal Display page and click Next Step.
10. Make desired changes on the Fulfillment page and click Save and Finish.
11. Click Publish Changes.
12. Go to Applications > My Applications and click on the drop-down icon against the newly created application to download the metadata.  

Configure ADP

Contact ADP and provide the downloaded metadata.

The configuration is complete.