Lesson 3 - Configuring Identity Providers and SSO

Table of Contents

Overview
SSO Google Integration
      Enabling SSO Google integration
      Enabling SSO Google Integration for a Specific User
Microsoft Azure SSO Integration
      Enabling SSO Azure Integration
      Enabling SSO Azure Integration for a Specific User
Enabling SSO Access
Logging to Foresight Using SSO

Overview

Foresight Connect enables the configuration of an identity provider to streamline authentication and user management processes, offering support for Azure Active Directory and Google. Only one provider can be installed, ensuring a focused and efficient setup tailored to your organization's needs. Each provider has distinct configuration options, allowing businesses to align identity management with their specific platforms. The installed provider can be uninstalled if needed, enabling seamless switching between Azure and Google. This adaptability ensures secure, seamless access for users while maintaining operational flexibility.

SSO Google Integration

SSO integration with Google lets you enable/disable access to Foresight Connect for a chosen user/group of users.

Enabling SSO Google integration

1. Contact your Account Manager, CSM, or Support Rep and request to enable SSO integration for your company,
   1. Go to the Identity Providers Tab in the Administrator role,
2. Click the Add button and choose Google as your identity provider,
3. Go to your Google Admin Workspace (if you are not signed in - sign in first),
4. Go to the Web and mobile apps in the Apps tab,
5. Click the Add app and choose Add custom SAML app,
6. Give a name to your App, e.g. Foresight Connect,
7. Copy the Name, SSO URL, Entity ID, Certificate, and Fingerprint,
8. Paste the information from point 8 into the Foresight app,
9. Click the Continue button on your Google configuration page,
10. Copy the ACS URL and Entity ID, and paste it in Foresight,
11. Click the Continue button on your Google configuration page,
12. Click the Add Mapping button and map your fields as below:
    1. First name -> first_name
    2. Last name -> last_name
    3. Email address -> email
13. Click the Finish button and then Test SAML login,
14. Change the Service status from OFF to ON,
15. Click the Test SAML login once again and choose your Google Account.
16. The integration is configured correctly.

Note: The GIF walkthrough below uses the legacy tool name as an example.

Enabling SSO Google Integration for a Specific User

1. Go to the Staff List Tab in the Administrator role
2. Create a new user or choose the existing one
3. Add the same email address as provided in the Azure Active Directory
4. Click the Install button next to the Azure icon

Microsoft Azure SSO Integration

SSO integration with Azure Active Directory lets you enable/disable Foresight access for a chosen user or group of users.

Enabling SSO Azure Integration

1. Contact your Account Manager, Support, or Customer Success Manager and request to enable SSO integration for your company,
2. Go to your Azure Portal (if you are not signed in - sign in first),
3. Go to the Properties tab in your Azure Active Directory
4. Copy the Tenant ID and Name
5. Go to the Identity Providers Tab in the Administrator role in Foresight
6. Click the Add button and choose Azure as your identity provider
7. Paste the Tenant ID and Name

Enabling SSO Azure Integration for a Specific User

1. Go to the Staff List Tab in the Administrator role
2. Create a new user or choose the existing one
3. Add the same email address as provided in the Azure Active Directory
4. Click the Install button next to the Azure icon.

Enabling SSO Access

With Foresight, you can also leverage Single Sign-On (SSO). This authentication scheme allows users to log in once using a single ID and password to access multiple related systems without re-entering credentials. To enable SSO in your account, two conditions must be met: your company must use Azure Active Directory or Google SSO, and your Account Managers must activate it for your organization.

1. Contact your Account Manager, Support, or Customer Success Manager.
2. Go to the Identity Providers Tab in the Administrator Role.
3. Install the integration according to the instructions.

Logging to Foresight Using SSO 

1. Be sure that you are logged into your Google / Microsoft account,
2. Go to Foresight Connect,
3. Choose the Single Sign-On button,
4. Provide your Organization Name,
5. Choose your Google Account/ Microsoft Account
6. You should be signed in.