Preparation
To use Idaptive you must have:
- Idaptive administrator account.
Raketa provides you:
- SP Entity ID in the following format: https://raketa.travel - идентификатор объекта поставщика услуг.
- Assertion Consumer Service (ASC) URL in the following format: https://raketa.travel/sso/acs?clientId=RAKETA_CLIENT_ID, where RAKETA_CLIENT_ID - client id in Raketa.
- Single Logout URL in the following format: https://raketa.travel/sso/slo?clientId=RAKETA_CLIENT_ID, where RAKETA_CLIENT_ID - client id in Raketa.
After all the necessary settings you should provide to Raketa:
- IdP Entity ID / Issuer - Idaptive identifier.
- Signing Certificate - auto-generated certificate file.
- Single Sing On URL - your authorization web-page URL, which we will use to redirect users to your authentication system.
- Single Logout URL - your URL, which we will use to sign out.
Application configuration
- Login to your Idaptive account.
- Select application setting from the main menu "Apps" [1] → "Web Apps" [2].
- Click the "Add Web Apps" button [3] to add a new application.
- In the pop-up window, select the application type "SAML" and click the "Add" button [4] to add an application.
- Click the "Yes" button [5] to confirm the application creation.
- Click on the application name [6] to go to the created application settings.
- Give your app a unique name [7], save changes [8] and go to trust settings [9].
- In trust settings, select manual Identity Provider Configuration [10].
View and save data that you should provide to Raketa:- IdP Entity ID / Issuer [11].
- Signing Certificate [12].
- Single Sing On URL [13].
- Single Logout URL [14].
- Next select manual Service Provider Configuration [15].
Fill out the form using data provided by Raketa:- SP Entity ID / Issuer / Audience [16]: https://raketa.travel
- Assertion Consumer Service (ASC) URL [17]: https://raketa.travel/sso/acs?clientId=RAKETA_CLIENT_ID
- Recipient: отметить чек-бокс Same as ASC URL [18]
- Name ID format [19]: EmailAddress
- Single Logout URL [20]: https://raketa.travel/sso/slo?clientId=RAKETA_CLIENT_ID
Click the "Save" button [21] to save the changes.