Managing authentication sources > SAML 2.0 supported IdP > Adding IdP authentication sources > Authentication Sources page > Add Authentication Source page > Add an authentication source manually

Add an authentication source manually

1. From the navigation bar, click Authentication Sources.

   The Authentication Sources page opens.

   

   Use this page to set up and manage the authentication sources for your Single Sign-On experience. The available authentication sources are listed in the grid. You can easily identify the authentication source(s) you are using by looking at the Enabled column. Yes indicates an authentication source is enabled and in use. No indicates the authentication source is not in use. More than one authentication source can be enabled.

   If more than one authentication source is enabled, a user is prompted for an authentication source selection when logging in. You can set an advanced setting (Save Authentication Source Selection) to allow the initial authentication source selection to be remembered via a cookie.

   You can learn more about the different authentication sources in the Managing authentication sources topic.

   Buttons, links, and options

   

   Click to edit an authentication source.

   

   Opens the Add Authentication Source page so you can define your IdP. There are several methods you can use to define your IdP. Refer to Adding IdP authentication sources for details.

   

   Click this button to manage claims. This button only appears after a SAMLResponse is received from the IdP. Life Suite Authentication does not know about what claims assertions are coming from the IdP until it has received that first SAMLResponse feed.

   Note: This button only applies to IdP authentication sources not Life Suite Login or Global GetSession authentication sources.

2. Click .

   The Add Authentication Source page opens.

   

   Use this page to add and define an IdP authentication source. You have three options:

   • Create Identity Provider with this URL
   • Create Identity Provider using File Data
   • Create Identity Provider Manually

   For details about each option, refer to Adding IdP authentication sources.

   After you add an authentication source, you must enable it.

   Fields, buttons, links and options

   Option 1 - Metadata URL

   If you have a public URL where your metadata file is stored, enter your URL here.

   

   Click to save and create the IdP using the URL you entered.

   Option 2 - Metadata File

   

   If you do not have a public URL but do have a metadata file, click to browse and select it.

   

   Click to create the IdP using the metadata file you selected.

   Option 3 - Leave fields blank to create an Identity Provider Manually

   

   Click to create the IdP manually.

3. From the Option 3-Leave fields blank to create an Identity Provider Manually section, click .

   A custom IdP entry is added to the Authentication Sources page.

4. In the grid beside the custom IdP entry, click .

   The Edit Authentication Source page opens.

   

   Use this page to make changes an IdP authentication source. The settings you can edit depend on how the IdP was set up. When you access this page, if a setting is grayed out, it is not editable.

   If the IdP was generated from a metadata URL, you can only manage these settings: Enabled, IdP Description, IdP Name, and Metadata URL.

   If the IdP was generated from a metadata file, you can only manage these settings: Enabled, IdP Description and IdP Name.

   To update an existing metadata file generated IdP, you can re-upload the file. If the EntityId is the same, it will update the existing IdP instead of generating a new IdP.

   Settings

   Enabled

   If set to Yes, Life Suite Login is recognized by Life Suite Authentication as a valid authentication source. This does not necessarily mean that this authentication source is fully functional. Additional configuration may be required. If multiple authentication sources are enabled, an unauthenticated user is presented with a choice of all authentication sources.

   If set to No, the authentication source is not enabled.

   EntityId

   The unique name/entity of the IdP.

   Note: Also referred to as audience or audience restriction by some IdPs.

   Encryption Certificate

   The public encryption certificate from your identity provider. Click Browse to find and upload.

   Signing Certificate

   The public signing certificate from your identity provider. Click Browse to find and upload.

   Metadata File

   The metadata file for the authentication source. This is shown if the IdP was created from a file (not editable).

   Metadata URL

   The metadata URL for the authentication source. This is shown if the IdP was generated from a URL (editable).

   IdP Description

   Enter the name or label presented to users for selection when multiple authentication sources are enabled.

   Tip: Use a descriptive name that makes it clear which IdP applies to a user.

   IdP Name

   The name or label used within Life Suite Authentication to refer to the authentication source/IdP.

   Logout Binding

   The binding the IdP uses for logout messages.

   Note: An IdP's binding can be different than Life Suite Authentication's binding.

   Logout Service URL

   The URL that Life Suite Authentication calls to complete a single logout (SLO) scenario.

   Sign-on Binding

   The binding the IdP uses for sign-on messages.

   Note: An IdP's binding can be different than Life Suite Authentication's binding.

   Sign-on Service URL

   The IdP that Life Suite Authentication routes to for authentication.

   Note: Also referred to as the Post Back URL, Destination URL, Recipient URL, or SAML Consumer URL by some IdPs.

5. Complete fields as appropriate.
6. Click .

   Note: When you add an authentication source, it is not automatically enabled. You must enable it.