Documo - SAML Relying Party Configuration - RSA Ready SecurID Access Implementation Guide

This section describes how to integrate RSA SecurID Access with Documo using Relying Party. Relying party uses SAML 2.0 to integrate RSA SecurID Access as a SAML Identity Provider (IdP) to Documo SAML Service Provider (SP).

Architecture Diagram

Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service as a relying party SAML IdP to Documo .

Procedure

1. Sign into the RSA Cloud Administration Console and browse to Authentication Clients > Relying Parties and click Add a Relying Party.

1. On Basic Information page enter a Name for the application, ie. Documo Then click on Next Step.

2. On Authentication page

   1. select the RSA SecurID Access manages all authentication

   2. Select the desired Primary Authentication Method from the dropdown list.

   3. Select the desired policy from the Access Policy for Additional Authentication.

   4. Click Next Step

   

3. On Connection Profile page

   1. Enter the Assertion Consumer Service (ACS) From the Documo configuration below for Assertion Consumer Service. For example: https://api.documo.com/assert.

   2. Enter the Service Provider Entity ID From the Documo configuration below for Entity Descriptor. For example: https://api.documo.com.

   3. Open Advanced Configuration section.

   4. Add Attribute Name = email and Property = mail.
   5. Note the Entity ID for the Identity Provider. This will be needed for the Documo configuration below.

   6. Click on Save and Finish

   

4. Browse to Authentication Clients > Relying Parties

5. Scroll down to the your newly created Relying party and click down error next to Edit and choose View or Download IdP MetatData and download the Metadata File.

1. Click on Publish Changes. Your application is now enabled for SSO. If you make any additional changes to the application configuration you will need to republish.

   

    

Configure Documo

Perform these steps to integrate Documo with RSA SecurID Access as a Relying Party SAML SP.

Procedure

1. Sign into Documo and browse to Account Settings > Security.

2. Scroll down to SSO and select Download Metadata.

3. In the Metadata file, locate the values for the Assertion Consumer Service and Entity Descriptor tags. These values will be used for the RSA Cloud Authenitcation Service (CAS) configuration above.

4. For the SSO URL enter the Entity ID from the RSA configuration above. For example, https://rsa-blr-pe.auth-demo.securid.com/saml-fe/sso.

5. For the Entity id enter the Entity ID from the RSA configuration above. For example, https://rsa-blr-pe.auth-demo.securid.com/saml-fe/sso.
6. For Email domain, enter the email domain for your SSO. For example, mycompany.com.
7. For the Signer Certficate enter the cert.pem file downloaded from the generated certificate bundle in the RSA Cloud Authenitcation Service (CAS) configuration.
8. In the Field Name in the SAML token containing the Identity email, enter email.

1. Click Submit.

Configuration is complete.

See main page for more certification information.