Configure identity provider settings to enable SAML authentication for your tenant.
You can configure up to three Identity Provider Settings (IdPs) per tenant and a maximum of three IdPs per provider.
Before you begin
Click Click here to download the SAML metadata and save the contents in a text file. This data is used for configuring Okta.
Procedure
| 1. | Enable an identity provider. Alternatively, from the SD-WAN Manager menu, choose Administration > Settings > Identity Provider Settings. Click the toggle button to switch between enabling and disabling IdP settings while retaining the existing configuration. |
|
| 2. | Click IDP Name and enter a unique name for your IdP. |
|
| 3. | Click Domain and enter a unique domain name for your IdP, for example, okta.com. If the domain name already exists, SD-WAN Manager generates an error message. |
|
| 4. | In the Upload Identity Provider Metadata section, upload the SAML metadata file you downloaded from your IdP. |
|
| 5. | Click Save. |
What to do next
After you configure a new IdP name, domain, and sign out of your current SD-WAN Manager session, you are redirected to a unified SAML login page.
In the unified SAML login page, if you require local authentication, remove the login.html portion of the URL. This redirects you to the local authentication page.
In the unified SAML login page, enter the SSO credentials for your IdP.
You are redirected to the unified SAML login page each time you access SD-WAN Manager after configuring a new IdP name and domain.