Skip to main content

Enabling SAML authentication

You can use Storage Manager to configure Security Assertion Markup Language (SAML) authentication so that remote users can log in by using a secure identity provider (IdP).

Before you begin

  • The IdP that you plan to use for remote authentication must be configured.

    Note
    See the documentation that is provided by the IdP that you have configured.

  • You must have the URI of the IdP.

About this task

The IdPs that have been validated with Storage Manager are Shibboleth and Active Directory Federation Services.

Note
After SAML authentication is enabled, only remote users can access the Storage Manager GUI. Local users cannot access the Storage Manager GUI after SAML authentication is enabled.
  1. Click Cluster > Settings.
  2. In the SAML Authenticaion card, click the gear icon .
  3. Select Enable SAML Authentication.
  4. Enter the IdP URI and IP address of host system.
  5. Click Save.
  6. Log in to Storage Manager by using the IdP login window.

    After the IdP is configured, if the user tries to log in by using the fully qualified domain name (FQDN), IPv6, or a cluster management LIF, the system automatically changes the IP address to the IP address of the host system that was specified during the IdP configuration.

Related tasks