SSO / SAML Authentication 

The purpose of this document is to explain how to set up SSO Configuration in Annex Cloud. Then, according to your Identity Provider, complete the SSO setup. 

Introduction

This section covers the basic steps for setting up SSO within your Annex Cloud account, including the configurations needed to add your SSO login details to an account and the process of implementing SSO. 

What is Single Sign-On?  

Single sign-on (SSO) is a solution to enable secure and efficient application access. The purpose of SSO is to help you centralize and simplify your user experience by allowing users to sign in to one application, the Identity Provider, and gain access to other applications such as Annex Cloud. 

Glossary of Terms

• Security Assertion Markup Language (SAML): An XML-based standard for exchanging authentication and authorization data between security domains. 
• Identity Provider (IdP): The application that provides a single source of identification for a user. Producer of assertions. Examples of Identity Providers include, but are not limited to, Microsoft Azure AD, AWS, Okta, Google, and more.
• Service Provider (SP): The application that the user wishes to access using the single source of identification provided by the IdP. Consumer of assertions. In this case, Annex Cloud is the Service Provider. 

Setup Overview 

1. Set up your Identity Provider (IdP) first. This step depends on the provider and is out of scope for this document. The information you must obtain includes
   1. Identity Provider Issuer 
   2. Login URL 
   3. Public Certificate
2. Set up SSO in AnnexCloud, using metadata and attributes from your IdP application setup. 
3. Verify SSO has been set up properly. 
4. Configure SAML according to your Identity Provider. 

Set up SSO in Annex Cloud 

Enable Single Sign-On from the Annex Cloud User Interface. 

1. Log into your Annex Cloud account with your credentials.
   
2. In the left panel of the Users menu, click Configure SSO.
   
3. Check the Enable SAML SSO checkbox to enable the SSO setting. 
   

SP Details Section

This section displays the Configure Your Identity Provider details. Here, Annex Cloud is the Service Provider.  

1. Click the Copy icon next to an item in order to pass it to your Identity Provider (IdP) OR click the Download button next to the SP Metadata file label to obtain a file, you can then upload the file to your SSO Provider.
   

IDP Details Section

1. From your IdP (Identity Provider) configuration, obtain the following values and enter them in following fields: 
   • Login URL 
   • Public Certificate 
2. Click the Save button.

Advanced Setting Section 

Use this section to define the SAML attribute names corresponding with the claim name set in the IDP. 

Annex Cloud uses the following SAML attributes for mapping.

1. First Name SAML Attribute 
2. Last Name SAML Attribute 
3. Site ID SAML Attribute 
4. Email ID SAML Attribute 

Once you set these attributes, click the Save button.

Configure SAML for Azure Active Directory (AD)

Click here for details on configuring SAML.