First steps
To start setting up this service, go to your management panel in Ironchip and create a new SAML type application.
Then download the metadata file.
Configure SolarWinds
Go to settings and then to all settings.
Look for the USER ACCOUNTS section and click on SAML Configuration.
Add a new Identity Provider.
On the first page that appears, simply check that the URL is correct and press Next.
Next, take a look at these two codes that appear.
Using the code shown below as a reference:
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" validUntil="2022-09-16T10:40:54Z" cacheDuration="PT604800S" entityID="google.com">
<md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<https://www.google.com/a//acs>" index="1"/>
</md:SPSSODescriptor>
</md:EntityDescriptor>
- Replace the content of entityID with the Audience URI.
- Replace the content of Location with the SSO Service URL.
Once you have the code block with the changed data, upload it to a public address, and copy the URL to the Metadata URL section in Ironchip.
Finally, configure the different sections with the following data:
Identity Provider Name:
A name of your choice for the new authentication method.
SSO Target URL:
The SingleSingOn URL found in the metadata file downloaded earlier from Ironchip.
Issuer URI:
The Entity_id of Ironchip that is found in the metadata file previously downloaded from Ironchip.
X.509 Signing Certificate:
For this section, copy the certificate that is in the metadata file downloaded earlier from Ironchip, and change its format to X.509 certificate, you can use the following website for this: https://www.samltool.com/format_x509cert.php
Authentication
Create a SAML type user in SolarWinds, and put the same name in the Ironchip access.
To create the user, go to the User Accounts section in the all settings section, and enter Manage Accounts.
When creating the account, select one of the two SAML type options, and configure the account or group to your needs. Remember to put the same username in the Ironchip access.
