Single Sign-on using Active Directory and SAML 2.0

Requirements to use a self-hosted ADFS server and SAML 2.0 to authenticate users in Risk Cloud

Risk Cloud Single Sign On with Active Directory

Risk Cloud supports single sign-on (SSO) through the SAML 2.0 standard. SAML 2.0 is an XML-based protocol that uses security tokens that contain assertions to pass information about a user between a SAML identity provider (your organization) and a SAML service provider (Risk Cloud). To use SAML SSO integration with LogicGate, you must have a SAML 2.0 compatible identity provider (IDP) server for authenticating Risk Cloud users.

A SAML 2.0 IDP can take many forms, one of which is a self-hosted Active Directory Federation Services (ADFS) server. ADFS is a service provided by Microsoft as a standard role for Windows Server that provides a web login using existing Active Directory credentials.

Requirements

To use ADFS to log in to your Risk Cloud instance, you need the following components:

• An Active Directory instance where all users have an email address attribute.

• A server running Microsoft Server 2012 or 2008 with ADFS.

• A Risk Cloud instance with SSO enabled.

To set up SSO with AD, view our 'Enabling Single-Sign On' help article.