Identity Provider

Users can be managed by an external system, authenticated by the external system, and the results can then be used as authentication for WebPerformer-NX. This external authentication linkage allows you to use the user management and authentication mechanisms you already have in place.

Note

• Supported authentication methods are SAML and OpenID Connect (OIDC).
• IdP is managed on an individual execution environment basis.
• IdP configuration is not available in the free plan.

IdP List

Identity providers registered in User Manager are listed. The meaning of each item is as follows.

Item	Description
Identity Provider	A name that identifies the identity provider.
Certification Standards	Displays selected Certification Standards.
Updated	Displays the date and time the identity provider was updated in local time.
Created	Displays the date and time the identity provider was created in local time.

Search

Allows searches using partial matches by IdP name.

Identity Provider Registration

From the [ADD] icon at the top of the screen, select [SAML authentication] (. /idp-saml) and [OpenID Connect (OIDC) Authentication](. /idp-openid-connect) identity providers can be registered.

Note

• Metadata and attribute mappings can be modified.
• The maximum number of identity providers that can be registered is 300 for both SAML and OpenID Connect.
• When an identity provider is registered, a group ({user pool ID}_{identity provider name}) is automatically created. Users who sign in with external authentication are automatically registered as users (status: External Provider) and belong to the automatically created group.

Service Provider Information (SP Information)

From the [SP Information] icon at the top of the screen, click [SAML Authentication] (. /idp-saml) and [OpenID Connect (OIDC) Authentication](. /idp-openid-connect), the information required to configure an external IdP can be confirmed.
The information that can be checked is as follows

SAML	OpenID Connect(OIDC)
• Single Sign On URL • Single Logout URL • Audience URI	• Single Sign On URL

Operation Menu

Click on the "Vertical Triple Point Reader" to the right of each record in the IdP list to open the "Menu". The description of each menu is as follows

Menu	Description
Signature certificate	Signature certificate required when [sign-out flow] is ON. Click to download the crt file. ・ Button is enabled only for SAML.
Edit	Identity Provider - Edit dialog opens to update identity provider information.
Delete	Delete the Identity Provider.