SAML Authentication and Elements

SAML is an authentication mechanism used for authenticating a user in DSR and SDS. It is an additional authentication mechanism to the existing local and LDAP authentication mechanisms.

SAML is an open standard used for authentication. Web applications uses SAML to transfer authentication data between the Identity Provider (IDP) and the Service Provider (SP). Web applications leverage SAML through the IDP to authenticate the user. There is no need for the SP to store passwords and address forgotten password issues.

IDP and SP exchange their metadata which contains the required information for interaction.

The SAML authentication flow is as follows:

1. Enable Saml authentication functionality from General Options screen.
2. Customer needs to upload IDP Metadata file in DSR/SDS.
3. Customer needs to upload DSR/SDS Metadata file on their IDP.
4. Once configuration is complete, the user can login through SAML using url: <ipaddress>?auth=SAML

Note:

1. DSR/SDS will act as a Service Provider, and the sample Metadata of SP is provided in DSR/SDS Metadata File.
2. The customer provides the IDP Metadata file, and it can be uploaded only from the Active NOAM screen.
3. Configuration of Metadata on customer's IDP is not within the scope of DSR/SDS.
4. SAML Authentication Screen allows the configuration of IDP metadata file.

SAML Authentication Elements

Table 2-55 SAML Authentication Elements

Element	Description	Data Input Notes
Entity Id	Entity Id of IDP Server	Format: String