SSO SAML Integration

Overview

• Dise SSO SAML connection allows use of an alternative Identity Provider (IdP) to authenticate users for the Dise CX Portal.
• The connection will allows the use of groups (or roles) to control who gets access to which resources.
• User login is dependent on email domain, and all email addresses used from a specific email domain will be forwarded to the alternative IdP.
• Accounts are automatically created in Dise CX portal on login and connected to a location and a role based on their group subscriptions in the IdP.
• User groups are validated on each login and refreshed if needed. Users that are no longer valid or do not have a matching group subscription in the IdP will not be allowed to login.
• Users removed from the Dise CX Portal will be recreated again upon login using the IdP.

Setup

Setting up SSO is a complex process, please request assistance via Dise support.

Before seeking assistance preparations to be made:

Required credentials provided by Identity Provider

Sign-in URL to identity provider

X509 signing certificate

Sign-out URL (optional)

SAML token attributes

{  "groups": "http://schemas.xmlsoap.org/claims/Group" }

Identity provider email domain(s)

Which Dise server(s) to access

List of roles & locations for mapping groupId(s) against