Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

MCS from version 1.3.0

Table of Contents

Table of Contents
minLevel1
maxLevel6
outlinefalse
styledefault
typelist
printabletrue

...

  1. Sign in to your Okta account.

  2. Navigate to Applications → Applications in the left sidebar.

    image-20241217-131335.png
  3. Click the Create App Integration button.

    image-20241217-131453.png
  4. Select SAML 2.0 and click Next.

    image-20241217-131556.png
  5. Provide an App Name and click Next.

    edit saml integration.png
  6. Configure the SAML settings in the Configure SAML window tab:

    • Single Sign-On URL: Enter the MCS Login URL Route prefixed with https://{MCS IP}/.
      Example:

      Code Block
      https://{MCS IP}/api/5.0/auth/saml/login/callback
    • Audience URI (SP Entity ID): Enter a unique ID. (This must match the Entity ID in MCS).

    • Name ID Format: Select Persistent.

    • configure saml.png

  7. Fill in the Feedback window tab:

    • In the App Type field, enable This is an internal app that we have created.

      image-20241217-133405.png
  8. Click Finish.

...

  1. Sign in to your Okta account.

  2. Navigate to Directory → Groups in the left sidebar.

    image-20241217-151350.png
  3. Click Add Group.

    groups .png
  4. Provide a Name and an optional Description for the group.

  5. Refresh the page to view the new group.

  6. Repeat for additional groups if needed.

...

  1. Navigate to Applications → Applications.

    image-20241217-131335.png
  2. Find the SAML Configuration Application you previously created in Okta.

  3. Click the name of your SAML Configuration Application.

    image-20241217-142742.png
  4. Navigate to the General tab in the SAML Configuration Application.

    image-20241218-124806.png
  5. Scroll to the SAML Settings section and click Edit.

    saml settings edit.png
  6. In the Edit SAML Integration window, in the General Settings tab:

    1. Click on the Next button to get to the Configure SAML tab.

    2. Scroll down in the SAML Settings to the Group Attribute Statements (optional).

    3. Enter group in the Name field. (This must be spelled exactly as "group").

    4. Leave Name Format as Unspecified.

    5. Choose a filter (e.g., Equals or Starts With) and provide the appropriate value based on your group's name.

      Group Attribute Statements.png

...

  1. Sign in to your Okta account.

  2. Navigate to Applications → Applications.

    image-20241217-131335.png
  3. Find the SAML Configuration Application you previously created in Okta.

  4. Click the name of your SAML Configuration Application.

    image-20241217-142742.png
  5. Go to the Sign On tab at the top of the page.

    image-20241217-142850.png
  6. Click the View SAML Setup Instructions button on the right side of the page, located under SAML Setup.

    view saml setup instruction.png
  7. Copy the Identity Provider Single Sign-On URL field for later use.

  8. Copy the X.509 Certificate field for later use. (Use the value between BEGIN CERTIFICATE and END CERTIFICATE).

  9. Log in to MCS.

  10. Click on the menu icon.

    menu icon.png
    1. A window displaying display of all the available widgets will open.

  11. Navigate to Management → Identity Providers.

    Identity Providers.png
  12. Fill in the required fields:

    • Entity ID / Issuer: Use the Audience URI (SP Entity ID) field you configured when setting up the SAML Configuration Application in Okta.

      image-20241217-143733.png
    • Entrypoint / IDP URL: Paste the Identity Provider Single Sign-On URL field you copied in step 7.

      image-20241217-144541.png
    • Certificate: Paste the X.509 Certificate field you copied in step 8.

      image-20241217-145025.png
  13. Click Save to complete the configuration.

Expand
titleWhere Can I Locate the Audience URI (SP Entity ID) in Okta, Corresponding to the Entity ID / Issuer in MCS?
  1. Access your SAML Configuration Application as described above.

  2. Go to the General tab at the top of the page.

    image-20241217-144222.png
  3. Scroll to the SAML Settings section.

  4. The Entity ID corresponds to the value of the Audience Restriction.

  1. You and your users can now log in to MCS using Okta via SAML, in addition to the basic login method.

    image-20241217-145617.png