Configure RSA Cloud Authentication Service

1. Sign in to the RSA Cloud Administration Console.
2. Navigate to the Authentication Clients menu, and from the dropdown, select Relying Parties.
3. In the Relying Party Catalog, select Add a Relying Party and click Add for Service Provider SAML.
4. On the Basic Information page, enter a name for the application in the Name field and click Next Step.
5. In the Authentication tab, select SecurID manages all authentication.
6. Select the Primary Authentication Method and Access Policy for Additional Authentication as required and click Next Step.
7. To provide Service Provider details, select Import Metadata and click the Choose File button. Then, select the file downloaded from the Service Provider..

8. Assertion Consumer Service (ACS) URL and Service Provider Entity ID values will be auto filled.
9. Under the Message Protection section, check the SP signs SAML requests checkbox. Then, click on Choose File to upload the certificate obtained from the MuleSoft Anypoint platform.

10. In the SAML Response Protection section, select IdP signs entire SAML response.
11. Download the certificate by clicking on Download Certificate.
12. Under the User Identity section, select Show Advanced Configuration, then configure Identifier Type and Property as follows:
    1. Identifier Type: unspecified
    2. Property: mail

13. Under Statement Attributes add the following attributes:
    1. Attribute Name: email
    2. Attribute Source: Identity Source
    3. Property: mail

14. Click Save and Finish. 
15. On the My Relying Parties page, click the Edit dropdown and select Metadata option to download the metadata.
16. Click Publish Changes to save your settings. After publishing, your application will be enabled for SSO.

Notes:

1. Click the SAML configuration that was configured in Anypoint platform.

2. Under Configuration tab, click on Anypoint service provider metadata link to download the metadata file.
3. While importing Mulesoft Anypoint Platform metadata into the RSA platform, the Encrypt Assertion checkbox will be auto populated. Untick the checkbox.
4. To download the Mulesoft Anypoint certificate, select Anypoint Keys, then click on the download button to download the MuleSoft Anypoint Platform certificate.

Configure Mulesoft Anypoint Platform

1. Log in to Mulesoft Anypoint Platform with admin credentials.
2. Click on Access Management.
3. Click on Identity Providers, then click Add Identity Provider, and select SAML 2.0.
4. Provide the following details:
   1. Import IdP Metadata: Upload the metadata file downloaded from the RSA platform.
   2. Name: Provide a unique name.

5. Provide the Audience value and click Save Changes.
   1. Audience - <organization domain>.anypoint.mulesoft.com. 

Notes

1. Click on your profile icon at the top right corner and select Profile.

2. Under the Settings section, you can find the organization domain.