People HR - SAML Relying Party Configuration - RSA Ready SecurID Access Implementation Guide

This section describes how to integrate RSA SecurID Access with People HR using Relying Party. Relying party uses SAML 2.0 to integrate RSA SecurID Access as a SAML Identity Provider (IdP) to People HR SAML Service Provider (SP).

Architecture Diagram

Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service as a relying party SAML IdP to People HR .

Procedure

1. 1. Sign into the RSA Cloud Administration Console and browse to Authentication Clients > Relying Parties and click Add a Relying Party.

      

       

      

       

   2. On Basic Information page enter a Name for the application, ie. People HR Then click on Next Step.

   3. On Authentication page

      1. 1. select the RSA SecurID Access manages all authentication

         2. Select the desired Primary Authentication Method from the dropdown list.

         3. Select the desired policy from the Access Policy for Additional Authentication.

         4. Click Next Step

      

       

   4. On Connection Profile page

      1. 1. Enter the Assertion Consumer Service (ACS) with https://<Domain>.peoplehr.net/Pages/Saml/consume.aspx replacing <Domain> with your People HR domain or your instance of People HR This is the ACS URL. For example https://rsa4.peoplehr.net/Pages/Saml/consume.aspx

         2. Enter the Service Provider Entity ID) with https://<Domain>.peoplehr.nereplacing <Domain> with your People HR domain or your instance off People HR.This is the Identifier URL For example https://rsa44.peoplehr.net

         3. Click on Download Certificate

         4. Click on Choose File and upload the certificate just downloaded.  This same certificate will be used in the People HR configuration below.

         5. Open Advanced Configuration section and note the Identity Provider Entity ID field . For Example :https://rsa-blr-pe.auth-demo.securid.com/saml-fe/sso

         6. Click on Save and Finish

      

       

   5. Browse to Authentication Clients > Relying Parties

   6. Scroll down to the your newly created Relying party and click down error next to Edit and choose View or Download IdP MetatData
      

1. Click on Publish Changes. Your application is now enabled for SSO. If you make any additional changes to the application configuration you will need to republish.

   

    

Configure People HR

Perform these steps to integrate PeoplePeople HR with RSA SecurID Access as a SAML SSO Agent.

Procedure

1. Sign into People HR and browse to Settings > Company

2. Next to Upload 'Single Sign On' SAML meta-data file select Browse and browse to the metadata XML file download above.

3. Navigate to Employees and add your Users

Configuration is complete.

See main page for more certification information.