Infoland Zenya SAML application setup
Introduction
This manual shows you how to set up SSO to Zenya by Infoland, using the SAML protocol. The configuration takes place in HelloID and in the iProva admin center.
Requirements:
HelloID environment
iProva environment version 5.6 or later
Create or Import a Certificate
If there is no certificate yet, a certificate must be imported or created. This can be done in the HelloID Administrator Portal under Settings > Certificates. For this tutorial, we will use a self-signed certificate. Learn more about certificates here.
HelloID Application Setup
Add the Infoland Zenya Application to HelloID
Create a new application in HelloID by navigating to Applications > Applications. Open the Application Catalog and search for "iProva". Find the SAML template, and click Add. Learn more about managing applications here.
General tab
On the General tab, fill the default login URL with the iProva environment SSO SAML endpoint URL. This is because we later have to add a shortcut and we need to be able to use the default iProva environment SSO URL for this shortcut.
We also advise to change the Display name to something along the lines of '- Hidden - Zenya (SAML)', so it is clear this application will be and is hidden.
Optionally, you may also add a description. Click Next.
Single Sign-on tab
On the Single Sign-On tab, perform the following steps:
The Endpoint URL is already filled in. Simply replace '{customer}' with your customer name.
Keep the Sign Assertion option selected.
In the X509 Certificate dropdown, select the certificate that you created or imported previously.
The Extra audience has to be filled with the Entity Id from iProva.
Click Next.
Credential tab
On the Credential tab, select perform Credentials are configured by admin and the following steps:
Select the Zenya logincode to send to Zenya
This is either the user's UserPrincipalName, in this case use {{user.login.username}}.
Or their SAMAccountName, in which case you'll need to use {{user.attributes.samaccountname}}.
Note: When using the SAMAccountName, the Active Directory Configuration sync is required to be configured. Learn more about Active Directory Configuration
Click Next.
Self service tab
On the Self Service tab, choose whether to automatically create a Self Service product, which makes the application requestable. This is optional. Click Next.
Finish tab
On the Finish tab, click Save to add the application to HelloID.
Application metadata
After saving the iProva application, click its Edit link on the applications overview. This will bring you to its properties page.
You now have two options to obtain the application metadata.
Static metadata (download)
You can simply click Download metadata at the right top of the screen and save the file to your local computer for later use in Zenya.
Dynamic Metadata (URL)
You can copy the link address (something along the lines of https://enyoi.helloid.com/metadata/download?ApplicationGUID=e6e741f5-a469-4849-93f7-fe2e259a339f) and replace 'download' with 'index' to view the metadata.
Hiding the application
On the Edit page of the iProva application select Hide application.
Infoland Zenya Configuration
Configuring Zenya
After the Identity Provider has been configured, you can continue configuring iProva. To do so, follow the steps below:
Edit the general system settings
Sign in to Zenya using the "Administrator" account
Open the "Go to" ("Ga naar") menu
Click on "Application management" ("Applicatiebeheer")
Click on "General" ("Algemeen") in the "System settings" ("Systeeminstellingen") panel
Click on "Edit" ("Wijzigen")
Scroll down to "Access control" ("Toegang tot de site")
Find the setting "Users are automatically logged on with their network accounts" ("Gebruikers worden automatisch ingelogd met hun netwerk account"), and change it to "Yes, authentication via SAML" ("Ja, authenticatie via SAML")
Additional options will appear:
Start the set up wizard
Click "Set up". This will open a wizard to assist during setup.
Make sure that your Identity Provider is set up, then click "Next" ("Volgende").
Upload or download the Identity Provider's Federation Data
If you are downloading the data, select "From URL" ("Via een URL"), enter the URL in the text box and then click the download arrow next to it. The box below will show whether the file is correctly downloaded, or alert you to any issues with the file. The URL should look like this:
https://enyoi.helloid.com/metadata/index?ApplicationGUID=e6e741f5-a469-4849-93f7-fe2e259a339f
If you are uploading a file, select "From XML file" (Via een XML bestand). Click on "upload a file" ("een bestand uploaden") and select the file to upload. Alternatively you can drag a file into the upload box. If there are any problems with the file, these will be displayed.
When you are done, click "Next" ("Volgende")
Test whether everything works
You must now test whether everything is set up correctly. This is done by clicking the "Test log in" ("Test inloggen") button. A new tab or window will be opened to the Identity Provider's sign-on page. Depending on whether you already have signed in, this window may immediately close again, completing the test. If the window does not close, you must sign in with your Identity Provider to continue.
Once the test is successfully completed, click "Next" ("Volgende") to continue.
Set up the Claim
You must now set up which Claim attribute will be used to match the Zenya user's login code. A list of available claims, with their value for the account you tested with, is shown to aid you in selecting the correct claim.
After selecting the correct attribute the wizard can be finished by clicking on "Finish" ("Voltooien").
Additional HelloID Application Setup
Add the Generic Shortcut Application to HelloID
Crurrently the iProva application will result in an endless redirection loop if you do not hide this application and create a shortcut. Creat a new application in HelloID by navigating to Applications > Applications. Open the Application Catalog and search for "Generic Shortcut". Find the Plugin template, and click Add. Learn more about managing applications here.
General tab
On the General tab, use the default Zenya environment SSO URL for the default login URL.
Optionally, you may also add a description. Click Next.
Finish tab
On the Finish tab, click Save to add the application to HelloID.
You have now successfully configured SSO for iProva in HelloID.