This article describes how to integrate RSA Cloud Authentication Service (CAS) with Cato Networks using OIDC.

Configure CAS

Perform these steps to configure CAS as Relying Party to Cato Networks.
Procedure

1. Sign in to your RSA Cloud Administration Console.
2. On the Access > My Page, enable Applications and click Save.
   
3. Click Access > OIDC Settings.
   
4. Add the email claim as shown in the following image and click New Claim.
   
5. On the Scopes page, specify the following values and click Save Settings.
   • Email
   • Openid
   • Profile
     
6. Click Applications > Applications.
   
7. Click Create From Template.
   
8. Click Select for OIDC.
   
9. Name your application and click Next Step.
   
10. On the Authentication page, click Next Step.
    
11. Add the Connection URL and Redirect URLs by copying them from Configuring RSA SSO (EA).
    
12. In the Allow CORS Authentication section, enable the Participate in Unified Logout and Include Session Identifier toggle buttons. 
13. Copy the Relying Party Logout URLs from Configuring RSA SSO (EA) and click Next Step.
    
14. On the Portal Display page, add Application Tooltip as required.
    
15. Click Save and Finish and click Publish Changes.
    After publishing, your application is now enabled for SSO. 

Configure Cato Networks

Perform the following steps to configure Cato Networks.

Procedure

1. Log in to Cato Networks with admin credentials.
2. Go to the Access tab, and then choose Single Sign On.
3. Click New. 
   
4. Choose RSA as the Identity Provider, name the new configuration, and make sure it is enabled and marked as Default.
   
5. In the RSA Cloud Administration Console, go to the Connection Profile page of the application created.
6. Copy the Authorization Server Issuer URL and use it as the Well-known URL.
   • Add the following suffix: well-known/openid-configuration to the Well-known URL.
   • Scroll down and copy the Client ID and Client Secret, and use them here.
     
     RSA SSO is now configured and is the default SSO provider. 
7. Configure how RSA SSO will be used in your account.
   

The configuration is complete.