✖

- Related Products
- ADManager Plus

  Active Directory Management & Reporting

  Download | Demo
- ADAudit Plus

  Real-time Active Directory Auditing and UBA

  Download | Demo
- EventLog Analyzer

  Real-time Log Analysis & Reporting

  Download | Demo
- Exchange Reporter Plus

  Exchange Server Auditing & Reporting

  Download | Demo
- AD360

  Integrated Identity & Access Management

  Download | Demo
- Log360

  Comprehensive SIEM and UEBA

  Download | Demo

# Configuring single sign-on for SAML-enabled custom enterprise applications

ADSelfService Plus supports single sign-on (SSO) for over 100+ cloud applications right out of the box. The solution also extends its SSO support capability to any SAML-enabled custom enterprise application.

#### Prerequisite:

1. Login to the enterprise application (service provider) for which custom application going to be created.
2. Get Metadata or Entity ID/SAML Redirect URL and ACS URL from the enterprise application

#### Create Custom Application

The steps given below will guide you through setting up the single sign-on functionality between ADSelfService Plus and your custom SAML applications.

1. Log into ADSelfService Plus web-console as an administrator.
2. Navigate to Application → Add Applications → Custom Application.
3. Enter your Application name and Description.
4. In the Domain Name field, enter the domain name of your email address. For example, if you use johndoe@mydomain.com to log in, then mydomain.com is the domain name.
5. Upload an image for app icon in both sizes.
6. Provide a suitable option for the Supported SSO flow.
Note: It is advisable to contact your Service Provider and verify the supported SSO flow before choosing the correct option.
7. Automatic Configuration : If you have metadata downloaded in the Step 2 of Prerequisite, Upload the downloaded Metadata file or follow step 8 given below.
8. Manual Configuration : Based on the SSO flow you selected earlier, enter the required details.

   - If you had selected SP flow:

     - In the SAML Redirect URL field, enter the SAML redirect URL your application service provider supplies. The URL value can be found in the application’s default login page or the SSO configuration page.
     - Enter the Assertion Consumer Service (ACS) URL your application service provider provides in the ACS URL field. This value can also be found in the application's SSO configuration page.

   - If you had selected IdP flow:

     - Enter the Assertion Consumer Service (ACS) URL your application service provider in the ACS URL field. This value can also be found in the application's SSO configuration page.
     - In the Entity ID field, enter the Entity ID that your application service provider supplies. This value can also be found in the application’s SSO configuration page.
9. Under Provider Settings :

- Choose an RSA-SHA1 or RSA-SHA256 Algorithm depending on the encryption your application supports.
- Pick a SAML response (Signed/ Unsigned).

10. Click Create Custom Application.

Note: Check with your Service Provider to identify the supported SSO flow and the SAML response. By default, the SAML Assertion will be 'signed'.
Go to Top

## Thanks!

Your request has been submitted to the ADSelfService Plus technical support team. Our technical support people will assist you at the earliest.

#### Need technical assistance?

- Enter your email ID
- Talk to experts

- By clicking 'Talk to experts', you agree to processing of personal data according to the Privacy Policy.

Copyright © 2021, ZOHO Corp. All Rights Reserved.