Single Sign-On

Flumotion Smart Multi CDN supports identity providers that use the Security Assertion Markup Language (SAML) protocol.

You can configure your identity provider to enable Single Sign-On (SSO) access to your account.

Configuring SSO #

To configure SSO for your account:

1. Navigate to the Account page.
2. In the sidebar, select Single Sign-On.
3. Copy the provided SSO configuration fields and add them to your identity provider.
4. Configure your identity provider. Once completed, download the metadata XML file generated by your identity provider and upload it to the Single Sign-On page.
5. Click Enable SSO.

Force SSO #

You can enforce SSO authentication for your account by enabling Force SSO.

Once enabled, users in your account will no longer be able to log in using a username and password and will be required to use SSO.

Important: Make sure to successfully test your SSO access before enabling Force SSO. If SSO is configured incorrectly, you may be locked out of your account without the ability to log in using a username and password.

Configuring SSO in Okta #

If you are using Okta as your identity provider, follow these steps as part of step 4 above:

1. Log in to your Okta account as an administrator.
2. In the sidebar, select Applications.
3. Click Create App Integration.
4. Select SAML 2.0 and click Next.
5. Enter the App name and click Next.
6. In the Single sign-on URL field, paste the value copied from the Assertion Consumer Service URI field on the Flumotion Smart Multi CDN SSO page.
7. In the Audience URI field, paste the value copied from the Audience URI field on the Flumotion Smart Multi CDN SSO page.
8. Under Name ID format, select EmailAddress.
9. Under Application username, select Email.
10. Click Next, and then click Finish.
11. Once the application is created, access the Metadata URL and save the XML file. Upload the XML file to your Flumotion Smart Multi CDN account as described in step 4 above.
12. You can now assign users to the application.

Configuring SSO in Microsoft Entra ID #

If you are using Microsoft Entra ID as your identity provider, follow these steps as part of step 4 above:

1. Log in to your Azure account as an administrator. Navigate to Microsoft Entra ID and select Enterprise applications. Click New application, then select Create your own application. Enter an application name, for example, Flumotion Smart Multi CDN, and select Integrate any other application you don’t find in the gallery (Non-gallery). In the newly created application, go to Manage and select Single sign-on. Select SAML as the SSO method. Complete the Basic SAML Configuration:
2. Identifier (Entity ID) – Paste the value copied from the Audience URI field on the Flumotion Smart Multi CDN SSO page.
3. Reply URL (Assertion Consumer Service URL) – Paste the value copied from the Assertion Consumer Service URI field on the Flumotion Smart Multi CDN SSO page.
4. Click Save.
5. Under Attributes & Claims, check the Required claim and ensure the following settings are configured:
6. Name identifier format – Email address
7. Source attribute – user.mail
8. Under SAML Certificate, download the Federation Metadata XML. Upload the XML file to your Flumotion Smart Multi CDN account as described in step 4 above. You can now assign users to the application:

• Under the application Properties, make sure the application is visible to users.
• Under Users and groups, assign the appropriate users or groups to the application.
• Users can then log in through Microsoft My Apps. It may take a few minutes for the new application to appear.

Configuring SSO in OneLogin #

If you are using OneLogin as your identity provider, follow these steps as part of step 4 above:

1. Log in to your OneLogin account as an administrator.
2. In the top navigation bar, select Applications and click Add App.
3. In the search box, enter SAML Custom Connector (Advanced) and select the appropriate application.
4. In the display name field, enter Flumotion Smart Multi CDN and click Save.
5. In the sidebar, select Configuration and complete the following fields:

• Audience (Entity ID) – Paste the value copied from the Audience URI field on the Flumotion Smart Multi CDN SSO page.
• Recipient – Paste the value copied from the Assertion Consumer Service URI field on the Flumotion Smart Multi CDN SSO page.
• ACS (Consumer) URL Validator – Paste the value copied from the Assertion Consumer Service URI field on the Flumotion Smart Multi CDN SSO page.
• ACS (Consumer) URL – Paste the value copied from the Assertion Consumer Service URI field on the Flumotion Smart Multi CDN SSO page.
• Login URL – Paste the value copied from the Assertion Consumer Service URI field on the Flumotion Smart Multi CDN SSO page.

6. In the top-right corner, click More Actions and select SAML Metadata to download the XML metadata file.

7. Upload the XML file to your Flumotion Smart Multi CDN account as described in step 4 above.

8. You can now assign users to the application.