Editing the Authentication Method

SSO Server

Select the SSO server name from the list.

SSO Initiated By

Select the SSO initiation method.

• Service Provider (CSO)—Select this method if SSO authentication is initiated by CSO. For example, when the user tries to use CSO application without authentication, the user is redirected to the SSO Server. After authentication with the SSO Server, the user is directed to CSO.

• Identity Provider (SSO Server)—Select this method to authenticate users by using the identity provider. When you login to the identity provider, it provides a list of applications that are integrated with the identity provider and you can access any of the applications. For example, if you click on the CSO application, you are directed to CSO and you can access the CSO application.

If you select the Service Provider (CSO) method, then the following field is displayed:

Username Pattern

Enter a list of username patterns separated by a comma, space, or semicolon. For example, *@aaa-example.com; *@xyz-example.com.

When you select Identity Provider (SSO Server) method, the following fields are displayed:

Direct CSO Login Message

Enter the message to display when a user tries to directly access CSO without being authenticated by the SSO server.

Logout Message

Enter the message to be displayed when the user logs out from CSO.

Tenant Identifier

Select the identifier to correlate the tenant Security Assertion Markup Language (SAML) attribute with the tenant. Whenever the tenant is onboarded into the system, the tenant is uniquely identified by any one of the following identifiers:

• Use Tenant Name—Select this option to identify the tenants by using the tenant name.

• Use OSS Tenant ID—Select this option to identify the tenants by using the tenant ID.

Permitted Roles and Mapping

Roles used in the SSO server (external system) are different from the roles used in CSO. Therefore, you must map the roles defined in CSO with the roles defined in the external SSO server (Identity Provider).

To map the roles:

1. Click add icon (+).

   A new row appears under the header in the table. If you want to delete the row, click the delete icon (X).

2. Select the role from the Role in CSO column, and then enter one or more matching roles (separated by commas) in the Mapped External Role column.

3. Click OK to save the changes. If you want to cancel,

   The user role in CSO is matched with the role in the SSO server.

You can also modify the permitted role and delete one or more permitted roles.