Configure RSA Cloud Authentication Service

1. Enable My Page SSO by accessing the RSA Cloud Admin Console > Access > My Page > Single Sign-On (SSO). Ensure it is enabled and protected using two-factor authentication - Password and Access Policy.

2. On the Applications > Application Catalog page, click on Create From Template.
3. On the Choose Connector Template page, click Select for SAML Direct.
4. On the Basic Information page, enter a name for the configuration in the Name field and click Next Step.
5. In the Connection Profile section, click the IdP-initiated option.
6. To provide Service Provider details, select Import Metadata and click the Choose File button. Then, select the file downloaded from the Service Provider. 

 

7. Assertion Consumer Service (ACS) URL and Service Provider Entity ID values will be auto filled.
8. In the SAML Response Protection section, select IdP signs entire SAML response, and download the certificate by clicking Download Certificate.
9. Under the User Identity section, select Show Advanced Configuration, then configure Identifier Type and Property as follows:
   1. Identifier Type: unspecified
   2. Property: mail

10. Under Statement Attributes add the following attributes.
    1. Attribute Name: email
    2. Attribute Source: Identity Source
    3. Property: mail

11. Click Next Step.
12. Choose your desired Access Policy for this application and click Next Step > Save and Finish.
13. On the My Applications page, click the Edit dropdown and select Export Metadata to download the metadata.
14. Click Publish Changes to save your settings. After publishing, your application will be enabled for SSO.

Notes

1. Click the SAML configuration that was configured in Mulesoft Anypoint platform.

2. Under Configuration tab, click on Anypoint service provider metadata link to download the metadata file.
3. While importing Mulesoft Anypoint Platform metadata into the RSA platform, the Encrypt Assertion checkbox will be auto populated. Untick the checkbox.

Configure Mulesoft Anypoint Platform

1. Log in to MuleSoft Anypoint Platform with admin credentials.
2. Click on Access Management.
3. Select Identity Providers, click the Add Identity Provider dropdown, and select SAML 2.0.
4. Provide the following details:
   1. Import IdP Metadata: Upload the metadata file downloaded from the RSA platform.
   2. Name: Provide a unique name.

5. Provide the Audience value and click Save Changes.
   1. Audience - <organization domain>.anypoint.mulesoft.com.

Notes

1. Click on your profile icon at the top right corner and select Profile.
2. Under the Settings section, you can find the organization domain.