Secure Mobile Access 12.5 Administration Guide

Technical Documentation>  Appendix>  Configuring External SAML Identity Providers>  Configuring SAML Authentication Servers>  OneLogin>  Configuring SMA Application at OneLogin>  Configuring SMA1000 at OneLogin using SAML Custom Connector
Table of Contents

Configuring SMA1000 at OneLogin using SAML Custom Connector

Use this application method if you do not have a user directory, such as AD, on-premise. In this method, details about user groups or roles are sent from OneLogin to the SMA1000.

If you have a user directory like AD on-premise, you can integrate it directly with SMA1000 for all group-level authorisations while still using OneLogin for user authentication. In this case, see Configuring SMA1000 at OneLogin using the SonicWall application.

To add the SAML Custom Connector (Advanced) application with SMA1000 details do the following

  1. On the OneLogin admin portal, go to Applications > Add App.

  2. Search and add the "SAML Custom Connector (Advanced)" application.

  3. Enter an application name. Example: Sonicwall SMA1000.

  4. Click Save.

  5. Click the Configuration tab.

  6. Enter the Audience (EntityID) value as the workplace URL. Example: https://workplace.company.com

  7. Enter ACS (Consumer) URL value as "https://workplace.company.com/saml2ssoconsumer".

  8. Keep all other values as default.

  9. Click Save.

  10. To send user groups or roles information to SMA1000 during user logins do the following:

    1. Click the Parameters tab on the left pane.

    2. Click + icon to add new field.

    3. Enter a name for the field.

      • Example, enter Groups (when sending AD groups to SMA1000).

      • Example, enter Roles (when sending User roles to SMA1000).

    4. Enable Include in SAML assertion checkbox.

    5. Enable Multi-value parameter checbox.

    6. Click Save.

    7. For Default, if no value is selected in the option, expand the first dropdown box and choose either MemberOf or User roles option based on whether you want to send user groups or roles information.

    8. For the second dropdown box, select the Semicolon Delimited input (Multi-value output) option.

    9. Click Save.

  11. Review values in other tabs. Default values are usually sufficient.

  12. Click Save to save your configuration.

After you have configured go to Configuring SMA1000 Appliance.