Infolearn application setup
Introduction
This manual shows you how to set up SSO to Infolearn, using the SAML protocol. The configuration takes place in HelloID and has to be completed by Infolearn.
Requirements:
HelloID environment
Infolearn environment
Create or Import a Certificate
If there is no certificate yet, a certificate must be imported or created. This can be done in the HelloID Administrator Portal under Settings > Certificates. For this tutorial, we will use a self-signed certificate. Learn more about certificates here.
HelloID Application Setup
Add the Infolearn Application to HelloID
Create a new application in HelloID by navigating to Applications > Applications. Open the Application Catalog and search for "Infolearn". Find the SAML template, and click Add. Learn more about managing applications here.
![Infolearn_Single_Sign-On__SSO__Configuration__6230690809116__6230495403164.png](../../../../image/166daf5e962958.png)
General tab
On the General tab, fill the Default Login URL with the Infolearn environment SSO SAML endpoint URL. Click Next.
![Infolearn_Single_Sign-On__SSO__Configuration__6230690809116__6230549309468.png](../../../../image/166daf5e96b8cc.png)
Single Sign-on tab
On the Single Sign-On tab, perform the following steps:
The Endpoint URL is already filled in. Replace the {customer} and {identifier} part with the values retrieved from Infolearn.
In the X509 Certificate dropdown, select the certificate that you created or imported previously.
The Extra audience has to be filled with the metadataurl from Infolearn
If required enter your Infolearn url in the SP-Initiated URL field. Setting value will cause HelloID to open the entered url first instead of starting the SAML flow directly.
As an additional layer of security, you can enable Validate and use ACS Request URL and enter the URLs that may start the SAML flow in the validation list.
Click Next.
![infoland-iprova-single-sing-on-tab.png](../../../../image/166daf5e97395f.png)
Self service tab
On the Self Service tab, choose whether to automatically create a Self Service product, which makes the application requestable. This is optional. Click Next.
Finish tab
On the Finish tab, click Save to add the application to HelloID.
Application metadata
After saving the Infolearn application, click its Edit link on the applications overview. This will bring you to its properties page.
You now have two options to obtain the application metadata.
Static metadata (download)
You can simply click Download metadata at the right top of the screen and save the file to your local computer for later use in Infolearn.
![Infolearn_Single_Sign-On__SSO__Configuration__6230690809116__6230594286364.png](../../../../image/166daf5e97d845.png)
Dynamic Metadata (URL)
You can copy the link address (something along the lines of https://enyoi.helloid.com/metadata/download?ApplicationGUID=e6e741f5-a469-4849-93f7-fe2e259a339f) and replace 'download' with 'index' to view the metadata.
![6230690809116_mceclip2.png](../../../../image/166daf5e98651d.png)
Mapping set
After saving the Infolearn application, click its Edit link on the applications overview. This will bring you to its properties page. You can now edit the Mapping Set on the configuration tab.
Click Change Mappings for the SAML user.
![Infolearn_Single_Sign-On__SSO__Configuration__6230690809116__6230649577884.png](../../../../image/166daf5e98d0cc.png)
The default mapping is using the user's contactEmail address as identifier. If required change this to another attribute. Please keep in mind that changing the identifier always has to be processed on the infolearn side as well.
![Infolearn_Single_Sign-On__SSO__Configuration__6230690809116__6230668941980.png](../../../../image/166daf5e99544b.png)
Infolearn
Request SAML
In order to make the connection, Infolearn needs to add the connection on their side. This can be requested at Infolearn.
To configure the SSO on the Infolearn side, they will need the following information:
Metadata URLPlease provide the dynamic Metadata URL from the previous step to Infolearn
Tenant IDThe name of your HelloID portal used in the mapping.
Login URL
The login URL also found in the metadata in the format of "https://{customer}.helloid.com/relayservice/redirect/396f41ed-6d3a-4ef3-bc4c-a64c5b1847e9"
Logout URLThe sign out URL of your HelloID environment in the format "https://{customer}.helloid.com/authentication/signoff"