Cisco Optical Network Controller Configuration Guide, Releases 26.x.x

Set up authentication using SAMLv2 SSO

Updated: July 22, 2026

Want to summarize with AI?

Use this procedure to set up authentication using SAMLv2 SSO. The Security Assertion Markup Language (SAML) SSO allows you to gain single sign-on access based on the SAMLv2 protocol.

Use this procedure to set up authentication using SAML SAMLv2 SSO in Cisco Optical Network Controller. Complete this task when you need to configure, verify, or manage the related network operation.

The Security Assertion Markup Language (SAML) SSO allows you to gain single sign-on access based on the SAMLv2 protocol. Both local and external users can authenticate using SSO user credentials if their accounts are mapped.

Follow these instructions to set up SAML SSO authentication.

Before you begin

Ensure you have administrative user privileges to access Cisco Optical Network Controller.

To set up authentication using SAMLv2 SSO, ensure your SSO server is installed and configured for the application.

Follow these steps to set up authentication using SAML SAMLv2 SSO:

Procedure

From the Cisco Optical Network Controller UI click Settings and select SAML SSO.

Screenshot of SAML SSO — Figure 1. SAML SSO

Enable Enabled toggle switch.

Fill in the fields.

Table 1. SAML SSO fields
Field	Description	Value
Login URL	Sign on URL for the Cisco ONC	Cisco ONC URL
Entity ID	A unique identifier for Cisco ONC within the SAML federation, provided by your Identity Provider.	This value is provided by your organization's SSO administrator or identity provider (IdP)
Base URL	Click Use Current to use the current URL.	Current URL
Signing Certificate	A downloaded certificate for Cisco ONC within the SAML federation, provided by your Identity Provider.	This value is provided by your organization's SSO administrator or identity provider (IdP)
Groups Attribute Name	Name of the group attribute that is assigned to you by your IdP.	memberOf

Click Save.

You successfully completed the SAMLv2 SSO authentication setup.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.