Skip to main content

HelloID

Decos JOIN application setup
Note: OpenID Connect preferred

It is recommended to connect to Decos JOIN using the OIDC Decos application.

Introduction

This article demonstrates how to set up Decos JOIN for single sign-on via WS-Federation. The configuration takes place in HelloID and requires you to send information to Tools4ever support and Decos JOIN support.

Requirements

  • HelloID environment

  • Decos JOIN environment

Create or import a certificate

  1. If there is no certificate yet, you must create or import one. For this tutorial, we will create a self-signed certificate. Name it DecosSelfSigned.

  2. Download the certificate as a Personal Information Exchange (.PFX) file.

  3. Supply it to Tools4ever support. Tools4ever will convert the .PFX certificate into a format compatible with the WS-Federation server, and send you a copy.

  4. When you receive the converted certificate, import it into HelloID. Name it Decos WS-Federation. Ignore any certificate errors.

Application setup
Add the Decos WS-Federation application

  1. Open the HelloID application catalog.

  2. Add the Decos (wsfed) application.

    2021-04-21_14-37-26.png
General tab

Change the following settings:

  • Default Login URL

    Your Decos server's base URL. For example: https://{customer}.decos.com/.

2021-04-21_14-42-39.png
Single Sign-On tab

  • Realm

    Your Decos server's base URL. For example: https://{customer}.decos.com/.

  • Endpoint URL

    Your Decos server's base URL. For example: https://{customer}.decos.com/.

  • X509 Certificate

    Select the Decos WS-Federation certificate you received from Tools4ever support

2021-04-21_14-43-47.png
Self Service tab

Optionally, generate a Self Service product, which makes the application requestable. Select a group which will have access to the product.

2021-04-21_14-44-31.png
Finish tab

Select the Save button to add the Decos JOIN application to HelloID.

2021-04-21_14-44-51.png
Additional configuration
Mapping

By default, the following mappings are created:

mappings.png

If required, you can add any of the following claims: otherPhone, mobilePhone or homePhone. These are the only custom claims that Decos accepts.

For more information, see Mapping - Overview.

Additional Decos sites

HelloID does not support multiple WS-Federation endpoints on the same application. If you need to add your ADMIN and ASPX pages, create a new WS-Federation application for each of them and repeat the steps in this article.

  • ADMIN: https://{customer}.decos.com/admin/

  • ASPX: https://{customer}.decos.com/aspx/

Supplier-side configuration

The HelloID side of the configuration is now finished.

To complete the setup, contact Tools4ever support and request your Decos endpoint URLs. Then send these URLs to Decos so they can configure their side of the application.

Finish up

The Decos JOIN application has been added to HelloID, and a trust has been configured between Decos JOIN and HelloID. You are now free to test the application and assign it to users within your organization. See Applications - Overview and its related articles for more information.

In this section: