Create a Web logon procedure

1. Login to the DualShield Management Administration Console
2. In the main menu, select “Authentication | > Logon Procedure”Procedures”
3. Click the “Create” “+ CREATE” button on the toolbar, on the right
4. Enter a recognisable “Name” and select “Web SSO” as the typeType
   Image Removed
   Image Added
   
   
5. Click “Save”“SAVE”
6. Click the Context Menu icon of the newly created logon procedureLogon Procedure, select “Logon Steps”
7. In the popup windowswindow, click the “Create” “+ ADD” button on the toolbar
8. Select the authentication method.
   Image RemovedAdd the necessary Authentication methods here
   
   Image Added

Create a Web application

1. In the main menu, select “Authentication | Application”> Applications”
2. Click the “Create” “+ CREATE” button on the toolbar
3. Enter a recognisable “Name”
4. Select your internal “Realm”
5. Select Add the newly created logon procedure
   Image RemovedLogon Procedure (from the previous step)
   
   Image Added
   
   
6. Click "Save" 
7. Click the context "..." menu of the newly created applicationApplication, then select "Agent" 
8. Select the SSO Server 
   Image Removed"Single Sign-on Server (SSO Server)"
   
   Image Added
   
   
9. Click "Save"
10. Click the context "..." menu of the newly created applicationApplication, select then select "Self Test" 
    Image Removed
    Image Added

Download the DualShield IdP Metadata

1. In the main menu, select navigate to " SSO | > SSO Servers" 
2. Click the context "..." Download IdP Metadata", and select the application created earlier.

Image Removed

Create a Service Provider 

1. menu of "Single Sign-on Server (SSO Server") then select "Download Idp MetaData" .
   Note the Name and location of the XML file, saved locally.

Image Added

In order to create a

Service Provider for Splunk

within DualShield - Next complete the "Splunk SAML Configuration"
Plus Download the Splunk Service Provider (SP) Metadata.

Create a Service Provider 

1. In the main menu, select " SSO | Service Providers" 
2. Click "Create"
3. Enter "Name", Select Type as "SAML 2.0"
4. Copy the content of Service Provider Metadata (SPMetadata.xml) into the "Metadata" field. 
   
   
   
   
5. Click Edit for Attribute and create a role attribute map to a fix value that match the name of the Splunk group for instance: admin
   
6. Select "User Principle Name" on NameID Fromat drop down list.