Unified VRM Integrations
      Back to home
      1. Knowledge Base
      2. Unified VRM Integrations

      SSO Configuration

      Unified VRM can be configured to allow you to authenticate through an external identity provider using SAML. This documentation will show the requirements for SAML configuration and also how to configure SSO with OKTA and OneLogin. 

      SAML configuration

      Please complete the following to enable SSO:

      1. Send support@nopsec.com your SAML Metadata endpoint or document.

      2. Create a custom mapping in your SAML configuration to explicitly pass an email address under an attribute "email".  See the instructions for your respective SSO provider.

        An example for google attribute mapping:

        image2019-4-30_12-14-58.png

      3. Create a new SAML app with the following configuration.
        1. Entity ID: urn:amazon:cognito:sp:us-east-1_Gods5pVuS
        2. ACS URL: https://auth.nopsec.com/saml2/idpresponse
        3. NameID format: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
        4. Subject Type: Username
      4. Make sure to assign users to the newly created “NopSec UVRM” app. If you click into the App, you should be able to view a list of assigned users/groups.

      Please notify support@nopsec.com once all of the above steps are complete.

      NopSec will then configure its SAML configuration in order to complete SSO for your organization. When this is complete, you will hear back from NopSec support.

       

      UVRM SSO configuration using OKTA  

      1. Under applications, select “Add Application”ssookta1.png

      2. Select “Create New App”

        ssookta2.png

      3. Select “Web” and “SAML 2.0”

        ssookta3.png

      4. Enter “Nopsec UVRM” or any name to help you identify it properly. Click on “Next”ssookta4.png

      5. Under SAML settings, enter:

        • Single Sign on URL (ACS URL): https://auth.nopsec.com/saml2/idpresponse and check “Use this for Recipient URL and Destination URL” 
        • Audience URI (SP Entity ID): urn:amazon:cognito:sp:us-east-1_Gods5pVuS 
        • Defaut RelayState: leave it blank
        • Name ID format: Persistent
        • Application username: Email
        • Attribute statement (Optional)
          • Name: email
          • Value: user.email

      ssookta5.png

      Click “Next” and save the newly created app. Send the meta data back to NopSec so it can be configured by NopSec.

      6. Go back to “Applications” and ensure to assign users to the newly created “NopSec UVRM” app. If you click into the App, you should be able to view a list of assigned users/groups. 

      ssookta6.png

      Please note: even though Nopsec currently supports SSO through SAML 2.0, UVRM user accounts still have to be created in advance before the user can login through SSO.

       

      UVRM SSO configuration using OneLogin 

      1. Create as SAML test connector 2.0. Enter the following fields in the Configuration section.

      See screenshots below and enter fields accordingly. 

      ssoonelogin6.pngssoonelogin5.pngssoonelogin4.pngssoonelogin3.png

      2. Enter the fields below in the Parameters section. 

      ssoonelogin2.pngssoonelogin1.png  

      3. Ensure to assign users to the newly created “NopSec UVRM” app. If you click into the App, you should be able to view a list of assigned users/groups. 

      Please notify support@nopsec.com once all of the above steps are complete.

      NopSec will then configure its SAML configuration in order to complete SSO for your organization. When this is complete, you will hear back from NopSec support.

      Please note: even though Nopsec currently supports SSO through SAML 2.0, UVRM user accounts still have to be created in advance before the user can login through SSO.