Configure SAML security

IBM® Surveillance Insight for Financial Services uses SAML 2.0 to allow single sign-on.

Diagram showing the SAML interactions — Figure 1. SAML configuration

Installing SAML Assertion Consumer Service (ACS) sample application
Install the Assertion Consumer Service (ACS) sample application to validate the SAML response that comes from the identity provider.
Configuring the SAML trust association interceptor
You must configure the SAML trust association interceptor (TAI).
Configuring a single sign-on identity provider
You must configure a partnership between the WebSphere® Application Server SAML service provider and the external SAML identity provider. You do this by importing a metadata file from the identity provider.
Exporting service provider metadata
Each identity provider that is used with your WebSphere Application Server service provider must be configured to add the service provider as an SSO partner. The procedure for adding the service provider partner to an identity provider depends on the specific identity provider. For more information about adding a service provider partner for SSO, see the documentation for your identity provider.
Mapping the application security role to the SAML group
You must map the identity provider groups to the SIFSDashboard roles.

Parent topic: Installation tasks