Configuring SAML-Based SSO with Smore

RapidIdentity Platform Documentation

Solution

Application

Content Type

Technical Documentation

Utilities & Services

ft:locale

en-US

Smore supports a SAML-based single sign-on (SSO) service for its web-based application that you can configure in your RapidIdentity portal. These configuration settings are an example and may vary for individual configurations.

Smore metadata must be viewed from the page's source to be correctly entered into a RapidIdentity federation partner.

Requirements

Smore administrator credentials
Access to your RapidIdentity administrator portal

In the Smore admin portal, update the entityID and locations to the following format:
```
https://secure.smore.com/sso/entity_id/logindomain
```
This should populate in the metadata downloaded from the Smore admin portal after settings are configured. The SSO endpoint should be set to:
```
/idp/profile/SAML2/Redirect/SSO
```
This link can be found in your RapidIdentity metadata under Configuration > Identity Provider Configuration > Live Metadata URL or the Metadata field.
Navigate to your RapidIdentity administrator portal.
From the module selector, choose Configuration.
Select Security > Identity Providers > Federation Partners.
Click Add Federation Partner > SAML 2.0, then click Create SAML Relying Party.
In the General section, add a name and the metadata from your Smore admin portal.
In the SSO Settings section, configure the following settings:
1. Sign Assertions: Always
2. Sign Response: Never
3. Encrypt Assertion: Never
4. Encrypt Response: Never
5. Signature Algorithm: SHA-1

In the Attribute Mapping section, click Add New Attribute + and configure the following attributes:

The attributes below depend on the configuration in the Smore admin portal. The following are commonly mapped attributes:


LDAP	SAML	Friendly Name (optional)	Name Format Value
`sn`	`last_name`	Smore Last Name Attribute	`urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`
`givenName`	`first_name`	Smore First Name Attribute	`urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`
`mail`	`email`	Smore Email Attribute	`urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`

Click Create, then click Save.

RapidIdentity and Smore are now integrated, allowing users to authenticate to Smore with their RapidIdentity credentials.