Manage Identity Providers

date_range 27-Mar-24

arrow_backward

arrow_forward

Identity providers (IdP) enable the use of third-party credentials, such as the credentials of your Google or Facebook account, to log in into Juniper Apstra Cloud Services.

Table 1 lists the parameters to add identity providers to an organization.

Table 1: Parameters to Add Identity Providers
Field	Description
Name	Enter a name for the identity provider.
Type	Displays the type of identity provider. The default identity provider is SAML and cannot be modified.
Issuer	Enter the unique URL that identifies your SAML identity provider. For example, Google and Microsoft.
Name ID Format	Select the unique identifier for the user. The options are e-mail and unspecified. If you select e-mail, the identity provider uses your e-mail address to authenticate you. If you select unspecified, the identity provider generates a unique identifier to authenticate you.
Signing Algorithm	Select a signing algorithm from the following: SHA1 SHA256 (default) SHA384 SHA512
Certificate	Enter the certificate issued by the SAML identity provider.
SSO URL	Enter the URL to redirect the users to the SAML identity provider for authentication. For example, https://www.google.com.
Custom Logout URL	Enter the URL to redirect the users after logging out. For example, https://www.juniper.net.
ACS URL	The URL that the identity provider should redirect an authenticated user to after signing in. The value is auto-generated and not editable.
Single Logout URL	The URL that the identity provider should redirect when a user logs out of an authentication session. The value is auto-generated and not editable.

Add an Identity Provider

To add an identity provider:

Click Organization > Settings in the navigation menu.
The Organization Settings page appears.
Click the Add IDP icon above the Identity Providers table.
The Create Identity Provider page appears.
Configure the identity provider by using the guidelines in Table 1.
Click Save.
The identity provider is created and listed in the Identity Providers table.

Note:
If you configure IdP, the roles assigned in IdP takes precedence over the roles assigned from the Administrators page.

Edit an Identity Provider

To edit an identity provider:

Click Organization > Settings in the navigation menu.
The Organization Settings page appears.
Click the identity provider you want to edit in the Identity Providers table.
The Edit Identity Provider page appears.
Edit the identity provider by using the guidelines in Table 1.

Note:
You cannot edit identity provider type, ACS URL, and Single Logout URL.
Click Save.
You are returned to the Organization Settings page, where you can view the changes in Identity Providers table.

Delete an Identity Provider

After you delete an identity provider, a user can log in only by using their Juniper Apstra Cloud Services account.

To delete an identity provider:

Click Organization > Settings in the navigation menu.
The Organization Settings page appears.
Click the identity provider that you want to delete.
The Edit Identity Provider page appears.
Click Delete.
You are returned to the Organization Settings page, where you can view that the identity provider is removed from the Identity Provider table.

arrow_backward PREVIOUS Authentication Methods Overview

NEXT arrow_forward Manage Roles

Juniper Apstra Cloud Services User Guide

ON THIS PAGE