This article will walk through configuring a ZeroLock Environment for Single Sign On (SSO) using Okta, a cloud-based identity and access management service.
Application Creation and Configuration
To create and configure an application for the ZeroLock Management Console (ZMC) in Okta use the following steps.
- Log in to the Okta admin center using your company’s credentials and go to Applications | Applications | Create App Integration.
- On the ‘Create a new app integration’ screen, select SAML 2.0 and click Next.
- Name the application, for this example, it’s ZeroLock Management Console, then click the Next button.
- Add the Audience URI and the Single sign-on URL. These can be found in the Service Provider Config section on the System Settings page of the ZeroLock Management Console.
- Audience URI = Entity ID
- Single sign-on URL = Reply URL
- Select 'I’m an Okta customer adding an internal app' and click on FINISH.
- Go to Applications | Applications and select the ZeroLock Management Console application.
- Click Sign On.
- In the SAML 2.0 section select More details.
- From the More details section, copy the below settings into the Identity Provider Config section in ZMC.
- Sign on URL = Login URL
- Sign out URL = Logout URL
- Issuer = IDP Identifier
- Download the signing certificate and upload it to ZMC.
Adding Users
In Okta, select the users for SSO access to the ZeroLock Management Console application. Users may be assigned to the ZMC individually or in groups. This is done under the Applications | Applications | Assignments screen.
Configuring the ZeroLock Management Console
If you are using a locally hosted environment and NOT the Vali Cyber hosted SaaS environment, it is necessary for the domain name for your Okta users to be entered in the Tenants section. The following will take you through that process.
For the Vali Cyber hosted SaaS environment contact Vali Cyber to have the Support Team enter the domain name.
- In ZeroLock Management Console (ZMC) go to Manage Users | Tenants and select the tenant that is to have SSO enabled.
- Double-clicking anywhere on the Tenant line will open the Edit Tenant screen. Once there, fill in the domain name with the domain for your Okta users. (Example: if the email address is user@mydomain.com then the domain name would be mydomain.com). Click the Edit Tenant button to save changes.
- For users that are to use SSO, when creating a new user or modifying an existing user, switch the SSO Account dropdown to YES. Lastly, select Update.
- When logging into the ZeroLock Management Console with this user, you should see the Okta login screen.
Congratulations, you have successfully configured SSO for the ZeroLock Management Console.