Aha! - SAML Relying Party Configuration - SecurID Access Implementation Guide

This section describes how to integrate SecurID Access with Aha! using Relying Party. Relying party uses SAML 2.0 to integrate SecurID Access as a SAML Identity Provider (IdP) to Aha! SAML Service Provider (SP).

Architecture Diagram

Configure SecurID Access Cloud Authentication Service

Perform these steps to configure SecurID Access Cloud Authentication Service(CAS) as a relying party SAML IdP to Aha! .

Procedure

1. Sign into the Cloud Administration Console and browse to Authentication Clients > Relying Parties and click Add a Relying Party. Then select Add for a SAML service provider.

   

    

   

    

2. On Basic Information page enter a Name for the application, ie. Aha! Then click on Next Step.

3. On Authentication page.

   1. select the RSA SecurID Access manages all authentication.

   2. Select the desired Primary Authentication Method from the dropdown list.

   3. Select the desired policy from the Access Policy for Additional Authentication.

   4. Click Next Step.

      

       

4. On Connection Profile page.

   1. Under the Service Provider Metadata section.

      

       

   2. For the Assertion Consumer Service (ACS) enter the SAML consumer URL from Aha! SP information in the SSO setup below. This URL is based on your instance of Aha!. For example, https://mytestinst.aha.io/auth/saml/callback.

   3. For the Service Provider Entity ID enter the SAML entitity ID from Aha! SP information in the SSO setup below. This URL is based on your instance of Aha!. For example, https://mytestinst.aha.io/.

   4. Uncheck SP signs SAML Requests.

   5. Check IdP signs assertion within response.

   6. Click on Download Certificate. This will be used below in the Aha! configuration.

   7. Open Advanced Configuration section.

   8. Ensure the Identifier Type is Email Address and the Property is set to mail, based on your configuration.

      

       

   9. Note the Identity Provider Entity ID field . For Example :https://rsa-test-pe.auth-demo.securid.com/saml-fe/sso.

5. Click on Save and Finish.

6. Browse to Authentication Clients > Relying Parties .

7. Scroll down to the your newly created Relying party and click down arrow to Edit and choose View or Download IdP MetatData and save off the metadata information if desired.

   

    

8. Click on Publish Changes. Your application is now enabled for SSO. If you make any additional changes to the application configuration you will need to republish.

   

    

Configure Aha!

Perform these steps to integrate Aha! with SecurID Access as a Relying Party SAML SP.

Procedure

1. Login into your Aha! account.

   

    

2. Browse to Account > Security and single sign-on.

3. Select SAML 2.0 from Identity provider list.

   

    

4. Enter a Name for the Identity provider. For example, MySecurID.

5. For Configure using select Metadata file. Then Choose File and upload the saved metadata file from the SecurID configuration above.

6. Note the SAML consumer URL and SAML entitity ID. These will be used in the SecurID configuration above.

   

    

7. Click on Enable.

Configuration is complete.

Next Step: See main page for more certification information.