# SolarWinds

> Integrate Ironchip with SolarWinds over SAML: create the application, configure the identity provider in SolarWinds, and create the SAML user.

URL: https://docs.ironchip.com/en/identidad/integraciones/saas/solarwinds/

Ironchip acts as the SAML identity provider for SolarWinds. This guide explains how to configure the identity provider in SolarWinds and create the users who authenticate with Ironchip.

## Requirements

- Access to the Ironchip admin console.
- A user with permission to configure SolarWinds.

## Configure Ironchip

1. In the Ironchip admin console, create a **SAML** application.
2. Download the metadata file.

   [Image: Creating the SAML application in the Ironchip admin console]

   [Image: Downloading the Ironchip metadata file]

## Configure SolarWinds

### Add the identity provider

1. Go to **Settings** and then **All Settings**.

   [Image: Settings menu in SolarWinds]

2. Under **USER ACCOUNTS**, click **SAML Configuration**.

   [Image: SAML Configuration under USER ACCOUNTS]

3. Add a new Identity Provider.

   [Image: Button to add a new Identity Provider]

4. On the first page, check that the URL is correct and click **Next**.

   [Image: First page of the wizard with the SolarWinds URL]

5. The next page shows two values: the **Audience URI** and the **SSO Service URL**. Make a note of them.

   [Image: Page with the SolarWinds Audience URI and SSO Service URL]

### Generate the metadata URL for Ironchip

Ironchip asks for the URL of the service provider metadata. To get it, use this code as a reference and replace the values:

```xml
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" validUntil="2122-09-16T10:40:54Z" cacheDuration="PT604800S" entityID="<AUDIENCE_URI>">
  <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<SSO_SERVICE_URL>" index="1"/>
  </md:SPSSODescriptor>
</md:EntityDescriptor>
```

- Replace the content of `entityID` with the **Audience URI**.
- Replace the content of `Location` with the **SSO Service URL**.

Once you have the block with the changed data, upload it to a public internet address and enter its URL, in raw format, in the **Metadata URL** field of the Ironchip application.

[Image: Metadata URL field in Ironchip]

### Complete the identity provider details

Configure the fields with this data:

[Image: Identity provider form in SolarWinds]

- **Identity Provider Name**: any name you like for the new authentication method.
- **SSO Target URL**: the `Location` property of the `SingleSignOnService` XML tag in the metadata file you downloaded from Ironchip.

  [Image: SingleSignOnService URL inside the Ironchip metadata file]

- **Issuer URI**: the `entityID` property of the `EntityDescriptor` XML tag in the same metadata file.

  [Image: entityID inside the Ironchip metadata file]

- **X.509 Signing Certificate**: copy the certificate from the Ironchip metadata file and convert it to the X.509 certificate format. You can use [this website](https://www.samltool.com/format_x509cert.php).

  [Image: Certificate inside the Ironchip metadata file]

## Create the SAML user

Create a SAML-type user in SolarWinds and use the same name in the Ironchip access.

1. In **All Settings**, go to **User Accounts** and open **Manage Accounts**.

   [Image: Manage Accounts under User Accounts]

2. When you create the account, select one of the two SAML-type options and configure the account or group to your needs.

   [Image: Creating the SAML-type account]

3. Use the same username in the Ironchip access.

## Verify the integration

This video shows a functionality test of the integration:

Video: [Testing the SolarWinds integration with Ironchip](https://play.hubspotvideo.com/v/7745202/id/159484246435)