AuthAnvil as IDP

Setup AuthAnvil as Identity Provider

Prerequisites:

  • Copy these values from the Service Provider Info tab of the SAML plugin.
    • SP Entity ID
    • ACS URL

Instructions:

  • Login to Authanvil and Go to SSO Management ⇒ +(add icon) -> Create New Application ⇒ Custom Application

Create Custom Application - AuthAnvil SSO

  • Enter the Application Name

Enter Application - AuthAnvil SSO

  • Go to Protocol Setup and Enter following info:
Protocol Setup SP-INIT
Assertion Consumer Service URL ACS URL copied from the plugin
Allow Multiple Audiences Unchecked
Audience URI SP Entity ID copied from the plugin
Service Entity ID SP Entity ID copied from the plugin

Protocol Setup - AuthAnvil SSO

  • Enter Advanced Setting
Include All Audience URIs Checked
Sign Token Response Checked
Sign Assertion Unchecked
Signing Algorithm SHA1

Advanced Settings - AuthAnvil SSO

  • Go to Attribute Transformation Tab and select Specify Custom Attribute Transformation. Add the NameID attribute and click on Add. Then add the name attribute as given in the image.

Custom Attribute Mapping - AuthAnvil SSO

Attribute Transformation - AuthAnvil SSO

 

  • Go to Permission tab and add Groups to which you want to give access to this application.

Group Mapping Access - AuthAnvil SSO

 

  • Click on Add Application and then Save Changes
  • Open the app. Click on View Federation Metadata in Protocol Setup Tab and save the generated metadata xml file. This metadata file will be required to configure the plugin.

Federation Metadata - AuthAnvil SSO