lboka/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/iam/umn/iam_08_0256.html
Wei, Hongmin d48c6004e4 IAM UMN 20240116 Version 
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2024-09-09 12:18:24 +00:00

6.0 KiB
Raw Blame History

Step 2: Configure the Enterprise IdP

You can configure parameters in the enterprise IdP to determine what information will be sent to the cloud platform. The cloud platform authenticates the federated identity and assigns permissions based on the received information.

If the SSO type is IAM user, the enterprise IdP must have the IAM_SAML_Attributes_xUserId assertion configured.

Common Parameters in an Enterprise IdP

Table 1 Common parameters in an enterprise IdP

Parameter

Description

Scenario

IAM_SAML_Attributes_xUserId

ID of an enterprise IdP user (federated user)

This parameter is mandatory when the SSO type is IAM user.

Each federated user is mapped to an IAM user. The IAM_SAML_Attributes_xUserId of the federated user is the same as the external identity ID of the corresponding IAM user.

IAM_SAML_Attributes_redirect_url

Target URL which the federated user will be redirected to

During SSO login, the federated user will be redirected to a page on the cloud platform .

IAM_SAML_Attributes_domain_id

Account ID of the cloud platform to be federated with the enterprise IdP

This parameter is mandatory in the enterprise IdP-initiated federation.

IAM_SAML_Attributes_idp_id

Name of the IdP entity created on the cloud platform

This parameter is mandatory in the enterprise IdP-initiated federation.
Parent topic: IAM User SSO via SAML