Identity Provider

Users can be managed by an external system, authenticated by the external system, and the results can then be used as authentication for WebPerformer-NX. This external authentication linkage allows you to use the user management and authentication mechanisms you already have in place.

Tips

Tips

• Supported authentication methods will be SAML and services will be Azure AD and Okta.
• IdP is managed on an individual execution environment basis.
• IdP configuration is not available in the free plan.

External Authentication Intergration Flow

The procedure for external authentication linkage in WebPerformer-NX applications is as follows

1. Click "IdP" at the top of the User Manager screen.
2. Click "Vertical Three-Point Reader" at the upper right of the IdP list, confirm the Single Sign-On URL and Audience URI, and set them to the external IdP.

	Setup for Okta	Setup for Azure AD
Single Sign-In URL	English：Single Sign on URL Japanese：シングルサインオン URL	English：Reply URL (Assertion Consumer URL) Japanese：応答 URL
Audience URI	English：Audience URI Japanese：オーディエンス URI	English：Identifier (Entity ID) Japanese：識別子

3. Retrieve SAML metadata documents from external IdPs.
   • For Azure AD

   1. open the single sign-on page of the application you are creating

   2. click the "Federation Metadata XML" download link for the SAML certificate

   3. save the downloaded XML file

   • In case of Okta
   1. Open the SignOn tab of the application you are creating.
   2. Click Actions under SAML Signing Certificates.
   3. Click on View IdP metadata.
   4. An xml file will open in a new window. Right click on the browser and click "Save As" to save the file.
4. Register the Identity Provider.
5. Place a push button from the component list as a button for external authentication on the sign-in screen (Sign In ID) of the authentication UI.
6. Open the properties screen of the button for external authentication placed in step 5, and set the following
   1. Select "IdP" from Click Event.
   2. Enter the name of the identity provider registered in step 4 in the "IdP" field.
7. Save the sign-in screen (Sign In ID) of the authentication UI.

Identity Provider Registration

1. Click the Create button in the upper right corner of the screen.
2. Enter the Identity Provider information.

Item	Input	Description
Certification Standard	Required	Select the authentication method "SAML".
Identity Provider Name	Required	Use any name except single-byte spaces, underscores, and commas. The maximum number of characters is 32.
Metadata	Required	Upload metadata documents obtained from external IdP.
Attribute Mapping	Required	Set up a mapping between user attributes and SAML attributes. User Attribute SAML Attribute Required Email (Enter SAML attribute name) ○ Name (Enter SAML attribute name) custom:custom_01 (Enter SAML attribute name) custom:custom_02 (Enter SAML attribute name） custom:custom_03 (Enter SAML attribute name） custom:custom_04 (Enter SAML attribute name） custom:custom_05 (Enter SAML attribute name） custom:custom_06 (Enter SAML attribute name） custom:custom_07 (Enter SAML attribute name） custom:custom_08 (Enter SAML attribute name） custom:custom_09 (Enter SAML attribute name） custom:custom_10 (Enter SAML attribute name） Tips Be sure to map the SAML attribute that maps to the user attribute "email" to the attribute that has the email information registered.

3. Click the "Add" button.
4. The added identity provider will appear in the IdP list.

Tips

Tips

• The maximum number of identity providers registered is 300.
• When an identity provider is registered, a group ({user pool ID}_{identity provider name}) is automatically created. Users who sign in with external authentication are automatically registered as users (status: External Provider) and belong to the automatically created group.
• For Azure AD, set the claim name in the "SAML attribute". Please note that the claim name is different when the namespace is set or not

IdP List

Identity providers registered in User Manager are listed. The meaning of each item is as follows.

Item	Description
Identity Provider	A name that identifies the identity provider.
Certification Standards	Displays selected Certification Standards.
Updated	Displays the date and time the identity provider was updated in local time.
Created	Displays the date and time the identity provider was created in local time.

Tips

Tips

Metadata and attribute mappings can be modified.

Operation Menu

Click on the "Vertical Triple Point Reader" to the right of each record in the IdP list to open the "Menu". The description of each menu is as follows

Menu	Description
Edit	Identity Provider - Edit dialog opens to update identity provider information.
Delete	Delete the Identity Provider.