Configure SSO for a device group

You must configure SSO for a device group before you can enable SSO for a user.

Before you begin

To ensure that Digi Axess can connect to your SSO application, information from the SSO app must be included in the device group SSO configuration.

Make sure you have the following information available from your SSO application:

• Identity Provider (IdP) Entity ID

• Identity Provider (IdP) Single Sign-On URL

• X.509 certificate from the IdP

To configure SSO for a device group:

1. Access the Digi Axess Admin page. You must have Admin or Device User privileges to access this page.

2. From the Device Management section in the Admin dashboard, click Device Groups or Change next to Device Groups. As an alternative, click Device Groups from the dashboard pane on the left of the screen.

   The Device Groups page displays.

3. Find the device group which you want to configure for SSO. Scroll through the list of names, or limit the list using the search field.

4. In the Group Name column, click on the name of the device group which you want to configure. The Device Groups page displays.

5. Click the SAML SSO Configuration tab. The SSO configuration options display.

6. To configure SSO for this device group, de-select the Inherit SAML settings from parent option. This option is selected by default.

7. Select Enable SAML SSO. Additional fields display in the page.

8. Enter the required SSO information from your SSO application.

   • Entity ID: Enter the Identity Provider's (IdP) entity ID.

   • SSO URL: Enter the Identity Provider'a (IdP) Single Sign-On URL.

   • IdP x509 Certificate: Enter the full X.509 certificate from the IdP.

9. Click Save.