This section describes how to integrate Governance and Lifecycle with RSA Cloud Authentication Service using My Page SSO.

Configure RSA Cloud Authentication Service 

Perform these steps to configure RSA Cloud Authentication Service as a My Page SSO to Governance and Lifecycle. 

Procedure

1. Sign in to RSA Cloud Administration Console.
2. Navigate to Applications > Application Catalog.
3. Click Create From Template and select SAML Direct.

4. On the Basic Information page, select Cloud. 

5. In the Name field, enter the name for the application and click the Next Step button.

6. On the Connection Profile page, navigate to Initiate SAML Workflow section and choose IdP-initiated.

7. Go to the Service Provider section and enter the following details:
   1. ACS URL: https://G&L domainname/aveksa/main.
   2. Service Provider Entity ID: Same as ACS URL.

8. Go to the Identity Provider section, make a note of the Identity Provider URL, as it will be needed for the G&L configuration.

9. On the Identity Provider Entity ID section, select the Default option and Audience for SAML Response.

10. In the Message Protection section, for SAML Response Protection section, select the following information: 

1. 1. Select IdP signs assertion with response.

11. Go to the User Identity section and select the following details:
    1. Identifier Type – transient
    2. Property – sAMAccountName.

12. Click Next Step. 
13. Select Allow All Authenticated Users, from the dropdown select the policy for this application.

14. Locate the application just created in My Applications page and click the dropdown arrow next to Edit > Export Metadata.

15. Click Publish Changes and wait for the operation to be completed.

16. After publishing, your application is now enabled for SSO. 

Configure Governance and Lifecycle SSO

Perform these steps to integrate Governance and Lifecycle with RSA SecurID Access as My Page SSO.

Procedure

1. Sign in to Governance and Lifecycle with admin log in.

2. On the home page, navigate to Admin > system > Authentication.

3. Create the Authentication source as shown in the following format: 

1. 1. Authentication Source Name : RSA
   2. Type : SAML Authenticator
   3. Configuration properties Identity URL : copy the identity URL from RSA.

4. Download the certificate to upload in RSA configuration.
5. Click on Finish to complete the configuration.

Return to the main page for more certification related information.