SnapLogic

Before You Begin

Introduction

This document describes how to configure Oracle Identity Cloud Service to provide Single Sign-On (SSO) for SnapLogic using SAML.

About SnapLogic

SnapLogic offers cloud integration products to allow customers to connect cloud-based data and applications with on-premise and cloud-based business systems. The products are designed to allow business users with limited technology skills to access and integrate data from different sources.

After integrating SnapLogic with Oracle Identity Cloud Service:

• Users can access SnapLogic using their Oracle Identity Cloud Service login credentials.
• Users can start SnapLogic using the Oracle Identity Cloud Service My Apps console.
• Admins can assign and revoke user access to the SnapLogic app using the Oracle Identity Cloud Service administration console.

What Do You Need?

• An Oracle Identity Cloud Service account with authorization rights to manage apps and users (Identity Domain Administrator or Application Administrator).
• An SnapLogic account with authorization rights to configure federated authentication.
• Make sure that the email ID of each user in SnapLogic matches the primary email ID of the Oracle Identity Cloud Service account.

Configuring the SnapLogic App in Oracle Identity Cloud Service

Use this section to register and activate the SnapLogic app, and then assign users to the app.

Registering and Activating the SnapLogic App

1. Access the Oracle Identity Cloud Service administration console, select Applications, and then click Add.

2. Click App Catalog.

3. Search for SnapLogic, and then click Add.

4. In the App Details section, enter your SnapLogic Organization name, and then click Next.

   Tip: This is the organization name that you received in an email from SnapLogic.

5. Click Download Identity Provider Metadata. To learn about other methods you can use to access SAML metadata, see Access SAML Metadata.

   Tip: Use this file later during SnapLogic configuration in the "Configuring SSO for SnapLogic" section.

6. Click Finish. Oracle Identity Cloud Service displays a confirmation message.

7. Click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Assigning Users to the SnapLogic App

1. On the SnapLogic app page in Oracle Identity Cloud Service, select Users, and then click Assign. The Assign Users window appears.

2. Select users that you want to assign to SnapLogic, and then click OK. Oracle Identity Cloud Service displays a confirmation message stating that the SnapLogic app is assigned to the users that you selected.

Configuring SSO for SnapLogic

1. Access the SnapLogic app as an administrator using the URL: https://elastic.snaplogic.com/sl/login.html.The SnapLogic page appears.

2. In the upper-right corner, click the user name. The Manager page appears.

3. In the left navigation menu, click Settings. The Organization Settings page appears.

4. Locate the Single Sign-On via SAML v2.0 section, and then click Configure SSO.... The Update dialog box appears.

5. Click Browse under the Upload Identity Provider (IdP) Metadata field and upload the identity provider metadata that you downloaded during SnapLogic registration. See the "Registering and Activating the SnapLogic App" section.

6. Click UPDATE.

Verifying the Integration

Use this section to verify that SSO/SLO works when initiated from Oracle Identity Cloud Service (IdP initiated) and SnapLogic (SP initiated).

Verifying Identity Provider Initiated SSO from Oracle Identity Cloud Service

1. Access the Oracle Identity Cloud Service My Profile console using the URL: https://<IDCS-Service-Instance>.identity.oraclecloud.com/ui/v1/myconsole.

2. Log in using credentials for a user that is assigned to the SnapLogic app. Oracle Identity Cloud Service displays a shortcut to SnapLogic under My Apps.

3. Click SnapLogic. The SnapLogic home page appears.

4. In the upper-right corner, confirm that the user that is logged in is the same for both SnapLogic and Oracle Identity Cloud Service.

   This confirms that SSO that is initiated from Oracle Identity Cloud Service works.

Verifying Service Provider Initiated SSO from SnapLogic

1. Access SnapLogic using the URL: https://elastic.snaplogic.com/sl/login.html. The SnapLogic login page appears.

2. Click Log in via Single Sign On, enter the Organization name, and then click Log in. You are redirected to the Oracle Identity Cloud Service login page.

   Tip: This is the organization name that you received in an email from SnapLogic.

3. Log in using credentials for a user that is assigned to the SnapLogic app. The SnapLogic home page appears.

4. In the upper-right corner, confirm that the user that is logged in is the same for both SnapLogic and Oracle Identity Cloud Service.

   This confirms that SSO that is initiated from SnapLogic works.

Troubleshooting

Use this section to locate solutions to common integration issues.

Known Issues

SnapLogic displays the message, "Single Sign On authentication failed. Unknown SnapLogic user: <UserName>"

Cause: The email attribute sent by Oracle Identity Cloud Service during SSO doesn't match any existing user in SnapLogic.

Solution: Ensure that the user that you assign to the SnapLogic app has an account in both Oracle Identity Cloud Service and SnapLogic with the same email address.

Oracle Identity Cloud Service displays the message, "You are not authorized to access the app. Contact your system administrator."

Cause 1: The SAML 2.0 integration between the Oracle Identity Cloud Service SnapLogic app and SnapLogic is deactivated.

Solution 1:

• Access the Oracle Identity Cloud Service administration console, select Applications, and then select SnapLogic.
• In the App Details section, click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Cause 2: The administrator revokes access for the user at the same time that the user tries to access the SnapLogic app using Oracle Identity Cloud Service.

Solution 2:

• Access the Oracle Identity Cloud Service administration console, select Applications, and then select SnapLogic.
• In the App Details section, select Users, and then click Assign to re-assign the user.

Unknown Issues

For unknown issues, contact Oracle Support:

1. Go to https://support.oracle.com.

2. Select Cloud Support, and then sign in with your support credentials.

3. In the Cloud Dashboard, confirm that there are no planned outages in Oracle Identity Cloud Service, and then click Create Service Request.

4. Select Oracle Identity Cloud Service as the service type.

5. Complete your service request.