MyWebTimesheets- SAML SSO Agent Configuration - SecurID Access Implementation Guide

This section describes how to integrate SecurID Access with MyWebTimesheets using a SAML SSO Agent.

Architecture Diagram

Configure SecurID Access Cloud Authentication Service

Perform these steps to configure Cloud Authentication Service as an SSO Agent SAML IdP to MyWebTimesheets.

Procedure

1. Sign into the Cloud Administration Console and browse to Applications > Application Catalog.

2. Search for MyWebTimesheets and click on +Add.

3. On Basic Information page enter a Name for the application, ie. MyWebTimesheets Then click on Next Step.

4. On Connection Profile page.

5.  

   1. Choose SP-Initiated

      

       

   2. In Connection URL field copy the value for the Identity Provider URL found further down the page.

   3. For Binding Method for SAML Request choose Redirect.

   4. Scroll down to SAML Identity Provider (Issuer) section.

   5. Note the Identity Provider URL and Issuer Entity ID. These values are automatically generated. They may be needed later for the configuration of MyWebTimesheets.

   6. Click on Generate Cert Bundle, set a a common name for your company certificate. Then click Generate and Download

   7. Select Choose File and upload the private key from the generated certificate bundle.

   8. Select Choose File and upload the cert.pem from the generated certificate bundle.

   9. Select Include Certificate on Outgoing Assertion.

      

       

   10. Scroll down to Service Provider section

   11. Enter the Assertion Consumer Service (ACS) update the URL using the DOMAIN for your instance of MyWebTimesheets. This can also be obtained from the Consumer Service URL (ACS) in the MyWebTimesheets configuration below. For example, https://VAGCDS.MyWebTimesheets.com/samllogin.aspx.

   12. Enter the Audience (Service Provider Issuer ID) update the URL using the DOMAIN for your instance of MyWebTimesheets. This can also be obtained from the EntityID in the MyWebTimesheets configuration below. For example, https://VAGCDS.MyWebTimesheets.com.

       

        

   13. Scroll down to User Identity section

   14. Ensure Identifier Type = Email Address, set your Identity Source and Property = mail.

       

        

   15. Click Next Step.

6. On User Access page select the Access Policy you require. Allow All Authenticated Users is the least restrictive. Click Next Step

   

    

7. On Portal Display Page.

   1. Select Display in Portal.

   2. Upload an Application Icon if you wish.

   3. Set an Application Tooltip if you wish.

   4. Click on Save and Finish

8. Click on Publish Changes. Your application is now enabled for SSO. If you make any additional changes to the application configuration you will need to republish.

   

    

Configure MyWebTimesheets

Perform these steps to integrate MyWebTimesheets with SecurID Access as a SAML SSO Agent.

Procedure

1. Sign into MyWebTimesheets as Admin and browse to Settings > Security Management > Company SAML Settings.

2. In the SAML Configuration, note the Consumer Service URL (ACS) and EntityID they are used above in the SecurID Access Cloud Authentication Service  configuration above.

3. For the SAML Settings select Edit button.

4. Enter for Login URL from the Identity Provider Entity ID value obtained above. For example, https://rsa-blr-pe.auth-demo.securid.com/saml-fe/sso.

5. For Certificate copy and paste the cert.pem file generated from the cert bundle in SecurID Access Cloud Authentication Service Configuration above.

6. For Is Enable select Yes.

7. Click on Save.

Configuration is complete.

Next Step: See main page for more certification information.