Authing Single Sign-On Example¶
Authing is a provider of identity recognition and access management solutions.
Steps¶
1. Register / Log In to Authing¶
You can create an Authing account by following the steps below. If you already have an active account, proceed directly to the next configuration step.
Note: Currently, Guance only supports SSO login via email accounts.
2. Create a User¶
On the Authing User Management > User List page, create a user as shown below.
Note: You can create a user either by username or email. When creating a user using a username, the username must be an email address. If you use a username for SSO login, you will need to add a mapping between the username and email in the SAML protocol configuration later.
3. Create an Authing Application¶
After creating the user, go to the Authing Applications page, click Add Application, and configure the application information as shown below.
Note: If you already have an application in use, skip this step and proceed directly to the next configuration. The application name and authentication URL must be customized.
4. Configure the SAML2 Identity Provider Information¶
Navigate to the application configuration page, scroll to the bottom, and find the additional identity protocols. Configure the SAML2 identity provider information as shown below.
(1) Fill in the default ACS (Assertion Consumer Service) URL and click Save. (This configuration is only used to obtain the metadata for the next step. You can replace it later with the correct assertion URL obtained from Guance. Example assertion URL: https://auth.guance.com/saml/assertion)
(2) Download the SAML2 metadata document. This document will be uploaded later when creating the SSO identity provider in Guance.
5. Select the Authentication Protocol Type¶
Change the default protocol type in Authentication Configuration to SAML2.
6. Select Application Access Authorization¶
Adjust Access Authorization and set the default permission: Allow all users to access. As shown below.
7. Enable SSO Single Sign-On in Guance¶
8. Update the Authing ACS URL and Mapping¶
After configuring SSO Single Sign-On in Guance, obtain the assertion URL, update the Default ACS URL in Authing SAML2, and add the mapping settings as shown below.
Mapping
// Authing email to email mapping, do not copy this line
{
"mappings": {
"email": "Email"
}
}
// Authing username to email mapping, do not copy this line
{
"mappings": {
"username": "Email"
}
}