PowerScale OneFS 9.8.0.0 Web Administration Guide

Configure SSO in OneFS

A OneFS administrator can configure SSO per access zone on the WebUI.

1. Log in to the OneFS WebUI.
2. Go to Access > Authentication providers > SSO.
3. Choose an access zone, and click Add IdP. For example, choose the system zone.
   NOTE:Each access zone must have an IdP configured for it. It can be the same IdP for all the zones, but each zone must be configured separately.
4. On the Add Identity Provider screen:
   1. Provide a unique name for the IdP. For example: myIDP.
   2. Click Next.
   3. Upload the XML metadata file that you downloaded from the ADFS system. Alternatively, click Manual and complete the detailed form. If you choose the manual method, you must have the IdP certificate to upload.
      If you choose the Manual method, the following information is required.

      Table 1. Field SpecificationsThe following table describes each field.

      Field	Description
      Entity ID	Unique identifier of the IdP as configured on the IdP. For example: http://rw-webui-win01.example.com/adfs/services/trust
      Login URL	Log in endpoint for the IdP. For example: http://rw-webui-win01.example.com/adfs/ls/
      Logout URL	Log out endpoint for the IdP. For example: http://rw-webui-win01.example.com/adfs/ls/
      Binding	Select POST or Redirect binding.
      Signing Certificate	Provide the PEM encoded certificate obtained from the IdP. This certificate is required to verify messages from the IdP.

   4. Repeat this step for each access zone for which you want to configure SSO.
   5. Click Next.
5. On the Service Provider screen:
   1. Notice that the Current access zone is carried over from the first screen.
   2. Select Metadata download or Manual copy, depending on how you want to provide OneFS details about this SP to the IdP.
   3. Provide the hostname or IP address for the SP for the current access zone. For example: 192.1.2.1.
   4. Click Generate.
      The system generates information about OneFS and this access zone for you to use in configuring the IdP.
   5. Obtain the generated information that you can use on the IdP system to prepare it to accept requests from this SP and access zone.
      • If you selected Metadata download above, download the file now. The signing certificate is in the XML file.
      • If you selected Manual copy above, use the Copy links in the lower half of the form to copy the information. Download the Signing Certificate.
   6. Click Next.
6. On the Summary screen, review the information.