Single Sign On into your Main IDM Tenant
At this point, we now have the following configured:
- Your Main IDM Tenant has established trust with your IDP IDM Tenant by importing the Identity Provider Metadata.
- Your Main IDM Tenant has added your IDP IDM Tenant as a 3rd Party IdP.
- Your IDP IDM Tenant has a SaaS Application that can create a SAML assertion and attempt to Single Sign On users after importing the Service Provider Metadata.
For this exercise, we will be utilizing a local user account in your IDP IDM Tenant named aduser. This user does not belong to any directory or domain, but we want to click our SSO Application we just created and allow our user to Single Sign On into our Main IDM Tenant console as the corp.local aduser account that we imported into our Main IDM Tenant at the beginning of this lab.
The local aduser account in your IDP IDM Tenant has already been created for you, so let's review how to sign in and test that our configuration works.
1. Launch an Incognito Session in Chrome
- In your Chrome browser, click the Settings button.
- Click New Incognito Window.
We're going to use an Incognito Session to ensure that our cached sessions or cookies do not affect our Single Sign On process. Alternatively, you could sign out of both of your VMware Identity Manager consoles.
2. Navigate to your IDP IDM Tenant
Enter the URL for your IDP IDM Tenant. Remember, this should match https://{tenantName}-idp.vidmpreview.com!
3. Login to your IDP IDM Tenant as aduser
- Enter "aduser" for the Username.
- Enter "VMware1!" for the Password.
- Click Sign In.
4. Launch the Single Sign On Application
- Click Catalog.
- Click Open for the SSO application.
5. Confirm the Single Sign On
- Notice that we were not prompted for any additional authentication and are now signed into your Main IDM Tenant.
- Click the User Dropdown.
- Click Settings.
6. Confirm the Signed-In User Profile
- Click Account.
- Confirm that the signed in user shows as the [email protected] account.
0 Comments
Add your comment