This section describes how to integrate RSA SecurID Access with Sumologic using a SAML SSO Agent.

Architecture Diagram

Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service as an SSO Agent SAML IdP to Sumologic . During configuration of the IdP you will need some information from the SP. This information includes (but is not limited to) Assertion Consumer Service URL and Service Provider Entity ID.

Procedure

1. Sign in to RSA Cloud Administration Console and browse to Applications > Application Catalog, click Create From Template and select SAML Direct.

2. Enter a name for the application in the Name field on the Basic Information page and click the Next Step button.

3. Navigate to Initiate SAML Workflow section.

   1. In the Connection URL field, enter the Authentication Request url of Configure SAML in Sumologic section.

   2. Choose SP-Initiated.

4. In SAML Identity Provider (Issuer) section. Click Generate Cert Bundle, enter the Common Name and Generate and Download the certificate. This certificate will be required of Configure SAML in Sumologic section.

1. 1. Identity Provider URL - <Automatically generated>

   2. Issuer Entity ID - <Automatically generated>

   3. Select Choose File and upload the private key.

   4. Select Choose File to import the public signing certificate.

5. Scroll down to the Service Provider section.

1. 1. Assertion Consumer Service (ACS) - Enter the Assertion Consumer URL of Configure SAML in Sumologic. section.
   2. Audience (Service Provider Entity ID) - Enter the Entity ID of Configure SAML in Sumologic section.

6. Scroll to the User Identity section, select the following values.

• • Identifier Type – Email Address
  • Identity Source – name of your user identity source
  • Property – mail

7. Click Show Advanced Configuration. In the Attribute Extension section, click on +Add button and add the following two attributes:

   a. Attribute Source : Identity Source, Attribute Name : firstName, Identity Source : your identity source, Property : givenName.

   b. Attribute Source : Identity Source, Attribute Name : lastName, Identity Source : your identity source, Property : sn.

8. Click Next Step.
9. On the User Access page, select Allow All Authenticated Users radio button.

10. Click Next Step.

11. On the Portal Display page, select Display in Portal.

12. Click Save and Finish.

13. Click Publish Changes.

Configure SAML in Sumologic

Perform these steps to configure Sumologic as an SSO Agent SAML SP to RSA Cloud Authentication Service.

Procedure

1. Log onto your Sumologic account using administrative credentials.

2. Navigate to Administration > Security.

   

3. On the Security page, click on SAML tab.
4. Click on Add Configuration button.

5. 1. Configuration Name: Enter a name for the configuration.

   2. Issuer: Enter the Issuer Entity ID of Configure RSA Cloud Authentication Service section.

   3. X.509 Certificate: Enter the content of the certificate downloaded of Configure RSA Cloud Authentication Service section.

   4. Attribute Mapping: Select Use SAML Subject.

   5. Optional Settings: Check SP initiated Login Configuration.

      1. Authn Request URL: Enter the Identity Provider URL  of Configure RSA Cloud Authentication Service section.

      2. Select Binding Type: Select Post.

         In Add Configuration page, enter the following values:

         In Add Configuration page, enter the following values:

6. Click Save.

7. Click on the configuration row created above, SP configuration should be visible. These configuration are required of Configure RSA Cloud Authentication Service section.

   

Configuration is complete.

Return to the Main Page for more certification related information.