Configure RSA Cloud Authentication Service

1. Enable My Page SSO by accessing the RSA Cloud Admin Console > Access > My Page > Single Sign-On (SSO). Ensure it is enabled and protected using two-factor authentication - Password and Access Policy.
2. On the Applications > Application Catalog page, click Create From Template.
3. On the Choose Connector Template page, click Select for SAML Direct.
4. On the Basic Information page, enter a name for the configuration in the Name field and click Next Step.
5. In the Connection Profile section, select IdP-initiated option.
6. Provide the Service Provider details in the following format: 
   1. Assertion Consumer Service (ACS) URL: https://<tenant ID>.sentinelone.net/web/api/v2.0/users/login/sso-saml2/<application ID>.
   2. Service Provider Entity ID: https://< tenant ID >.sentinelone.net/sso_service_provider/<application ID>.

7. In the SAML Request Protection section, select the SP signs SAML requests checkbox. Then, click Choose File to select the certificate obtained from the SP.
8.  In the SAML Response Protection section, select IdP signs entire SAML response, and download the certificate by clicking Download Certificate.
9. Under the User Identity section, select Show Advanced Configuration, then configure Identifier Type and Property as follows: 
   1. Identifier Type: Auto Detect 
   2. Property: Auto Detect

10. Click Next Step.
11. Choose your desired Access Policy for this application and click Next Step > Save and Finish.
12. On the My Applications page, click the Edit dropdown and select Export Metadata to download the metadata.
13. Click Publish Changes to save your settings. After publishing, your application will be enabled for SSO.

Notes

1. Go to Admin dashboard > Settings > Integration > SSO. Copy the URLs and download the certificate for the IdP configuration.

Configure SentinelOne

1. Log in to SentinelOne using Advanced or Enterprise credentials - https://SentinelOne.com
2. Click Settings at the bottom left corner of the dashboard.
3. Click the INTEGRATIONS tab, select SSO, then click the Enable SSO toggle button.
4. Click Add Domain and provide a domain name.
5. Provide the following details and select the Sign SAML Request checkbox.
   1. IDP Redirect URL: The value of SingleSignOnService, obtainable from the metadata file downloaded from the RSA platform.
   2. IssuerID: The value of EntityID, obtainable from the metadata file downloaded from the RSA platform.
   3. IDP Public Certificate: Upload the certificate downloaded from the RSA platform.

6. Select IDP Authentication and click the Test button.
7. After the SSO Test passed! message appears, click Save.