SSO Agent - SAML Configuration - Illumio RSA Ready SecurID Access Implementation Guide

This section contains instructions on how to integrate RSA SecurID Access with Illumio using a SAML SSO Agent.

Architecture Diagram

RSA Cloud Authentication Service

Follow the steps in this section to configure RSA Cloud Authentication Service as an SSO Agent SAML IdP to Illumio.

Procedure

1. Logon to the RSA Cloud Administration Console and browse to Applications > Application Catalog, search for illumio and click +Add to add the connector.

   

    

2. Enter a name for the application in the Name field on the Basic Information page and click the Next Step button.

3. Navigate to Initiate SAML Workflow section.

1. Leave the Connection URL field blank.

2. Choose IDP-initiated.

   Note: The following IDP-initiated configuration works for SP-initiated Illumio connections as well.

   

    

4. Scroll down to SAML Identity Provider (Issuer) section.

   

    

1. Take note of the Identity Provider URL.

2. Select Choose File and upload the private key.

3. Select Choose File to import the public signing certificate.

4. Select the checkbox for Include Certificate in Outgoing Assertion.

5. Scroll down to the Service Provider section.

   

    

6. Enter the Assertion Consumer Service (ACS) URL found on Illumio’s Single Sign-On Configuration page.

7. Enter the Illumio Issuer in the Audience (Service Provider Entity ID) field.

8. Scroll down to the User Identity section. Verify the settings are correct for your environment. In this example the NameID is set to format unspecified with the value of mail.

   

    

9. Click Show Advanced Configuration.

10. Under Attribute Extension add attributes Email Address, User.FirstName, User.LastName, User.MemberOf with their correlated property.

    

     

11. Click Next Step.

12. On the User Access page, select Allow All Authenticated Users user policy from the available options.

    

     

13. 13. Click Next Step.

14. On the Portal Display page, select Display in Portal.

15. Click Save and Finish.

16. Click Publish Changes. Your application is now enabled for SSO. Note: If you make any additional changes you will need to republish the changes.

    

     

Illumio

Follow the steps in this section to configure Illumio as an SSO Agent SAML SP to RSA Cloud Authentication Service.

Procedure

1. Login into the Illumio administration console.

2. Navigate to Access Management > Authentication.

3. Select SAML then click Configure.

4. Click Edit.

5. Paste the public certificate in the SAML Identity Provider Certificate field.

6. Enter the Identity Provider URL in the Remote Login URL field.

7. Enter the Logout Landing URL.

8. In the Authentication Method select Password Protected Transport.

9. Click Save.

Configuration is complete.

Return to the main page for more certification related information.