SAML Single Sign-On

1

Using single sign-on (SSO) will permit a single action of user authentication and authorization to access all computers and systems where he has access permission, without the need to enter multiple passwords.

2

1

INSTALLATION

3

1

---------------------

4

1

1. Download and extract Single.

5

1

6

1

You can obtain the latest Single Sign-On release from [[http://forge.kayako.com/attachments/download/260/samlsso.zip]] -- the files are available in .zip formats and can be extracted using most compression tools.

7

1

To download and extract the files, on a typical Unix/Linux command line, use the following commands:

8

1

9

1

wget http://forge.kayako.com/attachments/download/260/samlsso.zip

10

1

tar -zxvf samlsso.zip

11

1

This will create a new directory samlsso/ containing all samlsso files and directories. Then, to move the contents of that directory within your helpdesk app folder, continue with this command:

12

1

mv samlsso /path/to/your/installation/__apps/

13

1

14

1

2. Go to Admin interface of your helpdesk and click on Apps on left hand side menu

15

1

16

1

!http://forge.kayako.com/attachments/download/309/Screen_Shot_2012-10-12_at_11.27.33_AM.png!

17

1

18

1

3. Now click on Single Sign On and then click on Install button, this will install this app

19

1

20

1

!http://forge.kayako.com/attachments/download/310/Screen_Shot_2012-10-12_at_11.34.35_AM.png!

21

1

22

1

4. Now click on Settings option from left side menu and click on Single Sign On

23

1

24

1

!http://forge.kayako.com/attachments/download/311/Screen_Shot_2012-10-12_at_11.45.25_AM.png!

25

1

26

1

5. You will see Single Sign On settings page

27

1

28

1

!http://forge.kayako.com/attachments/download/312/Screen_Shot_2012-10-12_at_11.53.35_AM.png!

29

1

30

1

6. First you have to enable the Single Sign On by selecting yes for first option i.e. "Enable Single Sign"

31

1

32

1

7. Next you can enable sign on through twitter or facebook by enabling option “Enable Twitter Authentication” or “Enable Facebook Authentication” correspondingly

33

1

34

1

8. If you want to login from your own Identity Provider then provides your IdP details in next few settings options (for setting up your IdP and adding our Service Provider to your IdP refer to http://simplesamlphp.org/docs/stable/simplesamlphp-idp )

35

1

36

1

9. Entity ID – Specify the index of your IdP metadata array, use these while setting IdP for your help desk

37

1

38

1

10. SingleSignOnService URL – Specify the URL that Kayako will invoke to redirect users to your Identity Provider

39

1

40

1

11. Your IdP should return Email address and Name

41

1

42

1

12. Our Assertion Consumer Service (ACS) URL is http://yourservername.kayako.com/index.php?/Samlsso/Sso/Idp/Login

43

1

44

1

13. Next provide the path for your certificate which you can obtain this from your SAML identity provider

45

1

46

1

14. Once you are done with all the settings then change the template.

47

1

48

1

15. Now click on Templates -> Templates option from left side menu and click on General

49

1

50

1

16. List of templates will be shown up, click on header template

51

1

52

1

17. Add the below code: -

53

1

54

1

*After*

55

1

> <div id="loginsubscribebuttons"><input class="rebutton" value="<{$_language[login]}>" type="submit" /></div>

56

1

57

1

*Add code*

58

1

> <{if isset($_twitterEnable) || isset($_facebookEnable) || isset($_ssoIdpEnable)}>

59

1

> <hr class="vdivider">

60

1

> <{/if}>

61

1

><{if isset($_twitterEnable)}>

62

1

><div id="twitterlogin" class="widgetrow" style="padding-left:5px; " >

63

1

     <span onclick="javascript: window.location.href='http://ver2.kayako.com/index.php?/Samlsso/Sso/Twitter/Login';">

64

1

            <a class="widgetrowitem defaultwidget" style="background-repeat: no-repeat; background-position: 5px 5px; width: 139px; font-size: 13px; padding: 14px 10px 15px 50px;background-image: URL('http://ver2.kayako.com/__swift/themes/client/images/twitter_icon.jpg');" href="<{$_baseName}><{$_templateGroupPrefix}>/Samlsso/Sso/Twitter/Login">

65

1

                   <span class="widgetitemtitle">Login Using Twitter</span>

66

1

              </a>

67

1

      </span>

68

1

></div>

69

1

><{/if}>

70

1

><{if isset($_facebookEnable)}>

71

1

><div id="facebooklogin" class="widgetrow" style="padding-left:5px;" >

72

1

     <span onclick="javascript: window.location.href='http://ver2.kayako.com/index.php?/Samlsso/Sso/Facebook/Login';">

73

1

            <a class="widgetrowitem defaultwidget" style="background-repeat: no-repeat; background-position: 5px 5px; width: 139px; font-size: 13px; padding: 14px 10px 15px 50px;background-image: URL('http://ver2.kayako.com/__swift/themes/client/images/facebook_icon.jpg');" href="<{$_baseName}><{$_templateGroupPrefix}>/Samlsso/Sso/Facebook/Login">

74

1

                   <span class="widgetitemtitle">Login Using Facebook</span>

75

1

              </a>

76

1

      </span>

77

1

></div>

78

1

><{/if}>

79

1

><{if isset($_ssoIdpEnable)}>

80

1

><div id="ssoidplogin" class="widgetrow" style="padding-left:5px;" >

81

1

     <span onclick="javascript: window.location.href='http://ver2.kayako.com/index.php?/Samlsso/Sso/Idp/Login';">

82

1

            <a class="widgetrowitem defaultwidget" style="background-repeat: no-repeat; background-position: 5px 5px; width: 139px; font-size: 13px; padding: 14px 10px 15px 50px;background-image: URL('http://ver2.kayako.com/__swift/themes/client/images/saml_icon.jpg');" href="<{$_baseName}><{$_templateGroupPrefix}>/Samlsso/Sso/Idp">

83

1

                   <span class="widgetitemtitle">Login Using Your IdP</span>

84

1

              </a>

85

1

      </span>

86

1

></div>

87

1

><{/if}>

88

1

89

1

18. After changing the template file you can see the login buttons in Support Center corresponding to remote authentications you have enabled

90

1

91

1

!http://forge.kayako.com/attachments/download/313/Screen_Shot_2012-10-12_at_2.41.57_PM.png!

92

1

93

1

20. Now you can login with any account

Wiki