Page Comparison

You can add SummitAI as SAML app from the OKTA Console.

1. Log into OKTA Admin Console. Click Admin. Click Add Applications under Shortcuts menu.
   Image Removed
   Image Added
   Figure: Okta page: Adding SummitAI app
   
   
2. Click Create a new app. The Create a New Application Integration pop-up is displayed. Select the SAML 2.0 option and click Create.
   Image Removed
   Image Added
   Figure: Okta page: SummitAI app integration
   
   
3. Provide the required details under the General Settings and click Next.
   Image Removed
   Image Added
   Figure: Okta page: SummitAI app details
   
   
4. Provide the SAML details under SAML Settings and click Next.
   Image Removed
   Image Added
   Figure: Okta page: SummitAI SAML details

   
   

5. Provide the feedback details under Feedback and click Finish.
   Image Removed
   Image Added
   Figure: Okta page: Feedback

   
   

6. Click View Setup Instructions. Provide the required details.
   Image Removed
   Image Added
   Figure: Okta setup instructions

IfSummitAI is already added as a SAML app, you can modify the details as required.

1. Log into OKTA Admin Console. Click Admin. Click Add Applications under Shortcuts menu.
   Image Removed
   Image Added
   Figure: Okta page: Editing SummitAI app details
   
   
2. Click Apps you created. Select the SummitAI app that you want to update and click Edit.
   Image Removed
   Image Added
   Figure: Okta page: Editing SummitAI app details
   
   
3. Update the required details under the General Settings and click Next.
   Image Removed
   Image Added
   Figure: Okta page: Editing SummitAI app details
   
   
4. Update the SAML details under SAML Settings and click Next.
   Image Removed
   Image Added
   Figure: Okta page: Editing Feedback details
   
   
5. Update the feedback details under Feedback and click Finish.
   Image Removed
   Image Added
   Figure: Okta page: Editing Feedback details
   
   
6. Click View Setup Instructions. Update the required details.
   Image Removed
   Image Added
   Figure: Okta page: Editing setup instructions

You can add the users for whom SSO will be available for the SummitAI SAML app.

1. Log into OKTA Admin Console. Click Admin. Select People from the Directory menu.
   Image Removed
   Image Added
   Figure: Adding People

   
   

2. Click Add Person. The Add Person pop-up is displayed. Provide the details about the user you are adding and click Add Person. If you want to add more users, click Save and Add Another.
   Image Removed
   Image Added
   Figure: Adding People details

   
   

3. The added user needs to be activated so that the user can use SSO from OKTA for SummitAI . Click Activate. A confirmation pop-up page is displayed. Click Activate User.
   Image Removed
   Image Added
   Figure: Activating the added person

   
   

You can add SummitAI as SAML app from the Google Admin Console.

1. Log into Google Admin Console. Click Apps and select SAML Apps.
   Image Removed
   Image Added
   Figure: Google App Settings page

   
   

2. Click the Plus icon to enable SSO for SAML application. Click SETUP MY OWN CUSTOM APP.
   Image Removed
   Image Added
   Figure: Setting up SummitAI as custom app

   
   

3. Provide the SSO URL, Entity ID, and download the certificate. Click NEXT.
   Image Removed
   Image Added
   Figure: Downloading the certificates
   
   
4. Provide basic information about the SummitAI application and click NEXT.
   Image Removed
   Image Added
   Figure: Basic details
   

   
   

5. Provide the Service Provider details and click NEXT.
   Image Removed
   Image Added
   Figure: Service Provider details

   
   

6. Provide mappings between service provider attributes to available user profile fields. You can also come back later to complete the attribute mapping. Click FINISH.
   Image Removed
   Image Added
   Figure: Attribute mapping

IfSummitAI is already added a SAML app, you can modify the details as required.

1. Log into Google Admin Console. Click Apps and select SAML Apps.
   
   
   Figure: Google App Settings page
   
   

2. Select the SummitAI SAML app that you want to update.
   
   
   Figure: Updating SummitAI details
   
   
   Figure: Updating SummitAI details
   
   
3. Click the Service Provide Details and the Attribute Mapping sections to modify details in the respective sections.
   
   
   Figure: Updating Service Provider details
   
   
   
   Figure: Updating Attribute Mapping

You can enable or disable the SummitAI SAMP app configuration for all the users or for selected organizations.

1. Log into Google Admin Console. Click Apps and select SAML Apps.
   
   
   Figure: Google App Settings page
   
   

2. All the configured SAML apps are displayed. Click the three dots next to the SummitAI SAML app that you want to enable or disable for users. Select the appropriate option from the options. The available options are ON for everyone, ON for some organizations, and OFF.
   
   
   Figure: Enabling SummitAI app
   
   Field Descriptions

   Option	Description
   ON for everyone	If selected, the SAML app is available to all the users.
   ON for some organizations	If selected, the SAML app is available to users of the selected organizations
   OFF	If selected, the SAML app is not available to anybody.

   
   

You can add the users for whom SSO will be available for the SummitAI SAML app.

1. Log into Google Admin Console and select Users from the left menu.
   
   
   Figure: Adding Users
   
   
2. Mouse hover on the Add icon, the available icons are: Invite users, Add multiple users, and Add user.
   
   
   Figure: Adding Users
   
   
   Figure: Multiple options to add users
   
   

• Invite users: Select this option to invite users to use the SummitAI SAML app as SSO from Google. Specify the e-mail ids of the users to whom you want to send the invitation.
  
  
  Figure: Inviting users
  
  
  Figure: Inviting users
  
  

• Add multiple users: Select this option to add multiple users. You can upload a Microsoft Excel sheet with the names of the users and other details (download the template AS.CSV).
  
  
  Figure: Adding multiple users
  
  

• Add user: Select this option to a user. Provide the first name, last name, and the e-mail id of the user.
  
  
  Figure: Adding single user

1. Login to Ping Federate server.
   Image Removed
   Image Added
   Figure: Ping Federate Login Screen
   
   
2. On the Identity Provider tab, under SP Connections section, click Create New.
   Image Removed
   Image Added
   Figure: Identity Provider tab
   
   

3. On the SP Connection section, configure the tabs as follows:

   Expand
   title Connection Type
   Image RemovedImage Added Figure: SP Connection _ Connection Type

   
   

   Expand
   title Connection Options
   Image RemovedImage Added Figure: SP Connection _ Connection Options

   
   

   Expand
   title Import Metadata
   If you have a Metadata URL or FILE, select the respective options and provide the information. If you do not have an URL or a FILE, Select NONE. Image RemovedImage Added Figure: SP Connection _ Import Metadata

   
   

   Expand
   title General Info
   On the General Info tab, specify the PARTNER'S ENTITY ID, CONNECTION NAME, and the BASE URL. Select the LOGGING MODE as STANDARD. Image RemovedImage Added Figure: SP Connection _ General Info

   
   

   Expand
   title Browser SSO
   On the Browse SSO tab, click Configure Browse SSO. Image RemovedImage Added Figure: SP Connection _ Browse SSO Expand title SAML Profiles On the SAML Profiles section, select IDP-INITAIATED SSO. Image RemovedImage Added Figure: SAML PROFILES Expand title Assertion Lifetime Image RemovedImage Added Figure: Assertion Lifetime tab Expand title Assertion Creation On the Assertion Creation tab, click Configure Assertion Creation. Image RemovedImage Added Figure: Configure Assertion Expand title Protocol Settings On the Protocol Settings tab, click Configure Protocol Settings. Image RemovedImage Added Figure: Protocol Settings tab Expand title Assertion Consumer Service URL Select Binding as POST and specify the Endpoint URL as /Summit_SAMLResponse.aspx. Image RemovedImage Added Figure: Assertion Consumer Service URL Expand title Signature Policy Select ALWAYS SIGN THE SAML ASSERTION and click Next. Image RemovedImage Added Figure: Signature Policy Expand title Encryption Policy Image RemovedImage Added Figure: Encryption Policy Expand title Summary Image RemovedImage Added Figure: Summary Expand title Summary On the Summary tab, click Done. You will redirected to SP Connection Page. Image RemovedImage Added Figure: Browser SSO _ Summary

   
   

   Expand
   title Credentials
   Click Configure Credentials. Image RemovedImage Added Figure: Credentials Expand title Digital Signature Settings Click Manage Certificates and configure Signing Certificate. Image RemovedImage Added Figure: Digital Signature Settings Expand title Summary On the Summary tab, click Done. You will be redirected to SP Connection page. Image RemovedImage Added Figure: Credentials Summary

   
   

   Expand
   title Activation & Summary
   Select the Connection Status as Active and click Save. Image RemovedImage Added Figure: SP Connection _ Summary

   
   

4. Click Server Configuration and then click Metadata Export under ADMINISTRATIVE FUNCTIONS.

   Expand
   title Metadata Role
   Image RemovedImage Added Figure: Metadata Role

   
   

   Expand
   title Metadata Mode
   Image RemovedImage Added Figure: Metadata Mode

   
   

   Expand
   title Connection Metadata
   Select the configured SP Connection from the drop-down list. Image RemovedImage Added Figure: Connection Metadata Expand title Metadata Signing Select the Signing Certificate from the drop-down list. Image RemovedImage Added Figure: Metadata Signing Expand title Export & Summary On the Export & Summary tab, click Export and then click Done. An XML file is downloaded. Image RemovedImage Added Figure: Export & Summary

   
   

   Note
   title Note:
   Redirect URL : Select Identity Provider > SP CONNECTIONS. Click the SP Connection that you have configured. The SSO Application Endpoint displayed here is the Redirect URL to be entered in SummitAI Application.  Image RemovedImage Added Figure: Redirect URL - Sample Upload Certificate : The Certificate is available in the Metadata file, under the tag <ds:X509Certificate>. Copy this data and enter under Upload Certificate section.

   
   

SSO Configuration in SummitAI (For Ping Federate)

To configure SSO in the SummitAI application:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed. Select SAML and click ADD NEW under ACTIONS panel.
   
   Image Modified
   Figure: SSO Configuration page: Ping Federate
   
   

2. Type in the SSO configuration details. For more information about the fields on the SSO CONFIGURATION page, see Field Description.
3. Click VALIDATE. The certificate information is displayed if the uploaded certificate is valid. For invalid certificate, an error message is displayed.
4. Click SUBMIT. The SSO is configured successfully.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

1. Login to your ADFS account. On the Start screen, in the Search bar type in ADFS Management. Click ADFS Management.
   Image Removed
   Image Added
   Figure: ADFS Start screen
   
   
2. Under Trust Relationships, click Relying Party Trusts and then click Add Relying Party Trust.
   Image Removed
   Image Added
   Figure: Add Relying Party Trust
   
   
3. On the Welcome tab of Add Relying Party Trust Wizard, click Start.
   Image Removed
   Image Added
   Figure: Welcome tab
   
   
4. On the Select Data Source tab, select Enter data about the relying party manually.
   Image Removed
   Image Added
   Figure: Select Data Source tab
   
   
5. On the Specify Display Name tab, specify a Display name and click Next.
   Image Removed
   Image Added
   Figure: Specify Display Name tab
   
   
6. On the Choose Profile tab, select ADFS Profile and click Next.
   Image Removed
   Image Added
   Figure: Choose Profile tab
   
   
7. On the Configure Certificate tab, click Next.

8. On the Configure URL tab, Select Enable Support for the SAML 2.0 Web SSO Protocol.
   

   Image Removed

   
   Image Added
   Figure: Configure URL tab
   
   

   Note
   title Note:
   For Mobile App Relying party SAML 2.0 SSO service URL should be: https://customer.domain.com/SSO/MobileSAMLResponse.aspx

   
   
   

9. On the Configure Identifiers tab, specify a Relying Party trust identifier and click Next.
   Image Removed
   Image Added
   Figure: Configure Identifiers tab
   
   
10. Configure Multi-factor Authentication Now
    Image Removed
    Image Added
    Figure: Configure Multi-factor Authentication Now
    
    
11. Choose Issuance Authorization Rules
    Image Removed
    Image Added
    Figure: Choose Issuance Authorization Rules tab
    
    
12. Ready to Add Trust
    Image Removed
    Image Added
    Figure: Ready to Add Trust tab
    
    
13. Finish
    Image Removed
    Image Added
    Figure: Finish tab
    
    
14. Click Add Rule and Choose Claim Rule as Send LDSP Attributes as Claims on the Edit Claim Rules for ADFSSAML window.
    Image Removed
    Image Added
    Figure: Add Rule
    
    
15. On the Choose Rule Type section, select Claim Rule Template as Send LDAP Attributes as Claims.
    Image Removed
    Image Added
    Figure: Choose Rule Type
    
    

16. Specify the details in Configure Claim Rule tab as shown in the image below and click Finish.
    Image Removed
    Image Added
    Figure: Configure Claim Rule

    Note
    title Note::
    SummitAI Application uses Email of the user as a login ID. For this to work, you need to set up the Email as the NameID on the SAML login request. This can be achieved by setting up a Transform Rule.

    
    

17. Click Add Rule again, choose Transform an Incoming Claim and click Next.
    Image Removed
    Image Added
    Figure: Choose Rule Type tab
    
    

18. Setup Email ID to be sent as NameID as shown below and click Finish.
    Image Removed
    Image Added
    Figure: Configure Claim Rule
    
    
19. On the ADFS Management window, right click on the Relying Party for SummitAI and choose properties. Under the Advanced tab, choose SHA­-256 as the Secure Hash Algorithm.
    Image Removed
    Image Added
    Figure: Secure hash Algorithm
    
    
20. On the ADFS Management Window, choose Services > Certificates and double click Token Signing Certificate, which will give you an option copy to file. By doing this, you will be able to export the X509 certificate from the raw file.
    Image Removed
    Image Added
    Figure: Certificates Section
    
    
21. Select the format as shown below.
    Image Removed
    Image Added
    Figure: Export File Format

SSO Configuration inSummitAI (For ADFS)

To configure SSO in the SummitAI application:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed. Select SAML and click ADD NEW under ACTIONS panel.
   
   Image Modified
   Figure: SSO Configuration page: ADFS
   
   
2. Type in the SSO configuration details. For more information about the fields on the SSO CONFIGURATION page, see Field Description.
3. Click VALIDATE. The certificate information is displayed if the uploaded certificate is valid. For invalid certificate, an error message is displayed.
4. Click SUBMIT. The SSO is configured successfully.

Field Description

The following table describes the fields on the SSO CONFIGURATION page: