AnswerHub

Before You Begin

Introduction

This document describes how to configure Oracle Identity Cloud Service to provide Single Sign-On (SSO) for AnswerHub using SAML.

About AnswerHub

AnswerHub helps you capture, organize, and share knowledge for greater productivity, innovation, and user satisfaction.

After integrating the AnswerHub app with Oracle Identity Cloud Service:

• Users can access AnswerHub using their Oracle Identity Cloud Service login credentials.
• Users can start AnswerHub using the Oracle Identity Cloud Service My Apps console.
• Admins can assign and revoke user access to the AnswerHub app using the Oracle Identity Cloud Service administration console.

What Do You Need?

• An Oracle Identity Cloud Service account with authorization rights to manage applications and users (Identity Domain Administrator or Application Administrator).
• An AnswerHub account with a verified domain to include when you register the AnswerHub app in Oracle Identity Cloud Service.

Configuring the AnswerHub App in Oracle Identity Cloud Service

Use this section to register and activate the AnswerHub app, and then assign users to the application.

Prerequisite Step

A dedicated domain name is required before you can register and activate the AnswerHub app. You obtain that domain name from AnswerHub.

The AnswerHub domain name appears in the AnswerHub home URL: https://<Domain_Name>.answerhub.com.

Registering and Activating the AnswerHub App

1. Access the Oracle Identity Cloud Service administration console, select Applications, and then click Add.

2. Click App Catalog.

3. Search for AnswerHub, and then click Add.

4. In the App Details section, enter your domain name in the Domain Name field, and then click Next.

5. Click Download Identity Provider Metadata, and then click Download Signing Certificate.

   Tip: Use these files later during the AnswerHub configuration in the "Configuring SSO for AnswerHub" section.

6. Click Finish. Oracle Identity Cloud Service displays a confirmation message.

7. Click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Assigning Users to the AnswerHub App

1. On the AnswerHub app page in Oracle Identity Cloud Service, select the Users tab, and then click Assign. The Assign Users window appears.

2. Select the users that you want to assign to AnswerHub, and then click OK. Oracle Identity Cloud Service displays a confirmation message stating that the AnswerHub app is assigned to the users that you selected.

   Note: AnswerHub supports Just-In-Time (JIT) provisioning.

Configuring SSO for AnswerHub

1. Access AnswerHub as an administrator at: https://<Domain_Name>.answerhub.com.

2. In the upper-right corner, select Administration from the drop-down list. The Administration Dashboard page appears.

3. Click the Users & Groups tab.

4. In the left navigation pane, under the Social Settings section, click SAML Setup.

5. Use the following table to set the attribute values on the IDP Config tab.

   Attribute	Settings
   IDP Login URL	Enter the Login URL/SSO Endpoint: https://<IDCS-Service-Instance>.identity.oraclecloud.com/fed/v1/idp/sso
   IDP Logout URL	(Optional) Keep it blank.
   IDP Login Type	Enter post.
   IDP Name Identifier Format	Enter emailAddress.
   Use NameID as Username?	Select this check box.
   Enable Debug Mode?	Select this check box.

6. Select the following attribute mapping for SAML Attribute Mapping.

   SAML Attribute Mapping	Settings
   IDP Email Mapping	Enter Email address.

7. Select the following attribute settings on the Keys and Certificates tab, and then click Save.

   Attribute	Settings
   IDP Public Key	Paste the certificate into the IDP Public Key box. You downloaded the certificate during AnswerHub registration in Oracle Identity Cloud Service. See the "Registering and Activating the AnswerHub App" section.

Verifying the Integration

Use this section to verify that SSO works when initiated from both Oracle Identity Cloud Service (IdP Initiated SSO) and AnswerHub (SP Initiated SSO).

Verifying Identity Provider Initiated SSO from Oracle Identity Cloud Service

1. Access the Oracle Identity Cloud Service My Profile console: https://<IDCS-Service-Instance>.identity.oraclecloud.com/ui/v1/myconsole.

2. Log in using credentials for a user that is assigned to the AnswerHub App. Oracle Identity Cloud Service displays a shortcut to AnswerHub under My Apps.

3. Click AnswerHub. The AnswerHub home page appears.

4. Confirm that the user that is logged in is the same for both AnswerHub and Oracle Identity Cloud Service.

   This confirms that SSO that is initiated from Oracle Identity Cloud Service works.

Verifying Service Provider Initiated SSO from AnswerHub

1. Access the AnswerHub login page at: https://<Domain_Name>.answerhub.com.

   You are redirected to the Oracle Identity Cloud Service login page.

2. Log in using credentials for a user that is assigned to the AnswerHub app. The AnswerHub home page appears.

3. Confirm that the user that is logged in is the same for both AnswerHub and Oracle Identity Cloud Service.

   This confirms that SSO that is initiated from AnswerHub works.

Troubleshooting

Use this section to locate solutions to common integration issues.

Known Issues

Oracle Identity Cloud Service displays the message “You are not authorized to access the app. Contact your system administrator." or “There is a problem with your account. Please contact Support."

Cause: The SAML 2.0 integration between the Oracle Identity Cloud Service AnswerHub app and AnswerHub is deactivated.

Solution:

• Access the Oracle Identity Cloud Service administration console, select Applications, and then select AnswerHub.
• Click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Oracle Identity Cloud Service displays the message “You are not authorized to access the app. Contact your system administrator."

Cause: The administrator revokes access for the user at the same time that the user is trying to access the AnswerHub app using Oracle Identity Cloud Service.

Solution: Access the Oracle Identity Cloud Service administration console, select Applications, AnswerHub, Users, and then click Assign to re-assign the user.

Unknown Issues

For unknown issues, contact Oracle Support:

1. Go to https://support.oracle.com.

2. Select Cloud Support, and then sign in with your support credentials.

3. In the Cloud Dashboard, confirm that there are no planned outages in Oracle Identity Cloud Service, and then click Create Service Request.

4. Select Oracle Identity Cloud Service as the service type.

5. Complete your service request.