{"id":89947,"date":"2023-06-07T17:14:10","date_gmt":"2023-06-07T21:14:10","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=89947"},"modified":"2024-05-03T17:39:20","modified_gmt":"2024-05-03T21:39:20","slug":"integrate-with-kisi","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/integrate-with-kisi","title":{"rendered":"Integrate with Kisi"},"content":{"rendered":"\n
Use 黑料海角91入口 SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications with a single set of credentials. Automatically provision, update and deprovision users and groups in Kisi from 黑料海角91入口 using the Identity Management (SCIM) integration. Leverage this integration to centralize user lifecycle, user identity, and group management in 黑料海角91入口 for Kisi. Save time and avoid mistakes, as well as potential security risks, related to manually creating users and groups. <\/p>\n\n\n\n
Read this article to learn how to setup the Kisi integration.<\/p>\n\n\n\n
Prerequisites<\/strong><\/p>\n\n\n\n Considerations<\/strong><\/p>\n\n\n\n Attribute Considerations<\/strong><\/p>\n\n\n\n <\/p><\/div> If this is a Bookmark Application, enter your sign-in URL in the Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/p><\/div> The SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/p><\/div> Contact Kisi support to obtain your subdomain value. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/p><\/div> Metadata can also be downloaded from the Configured Applications<\/strong> list. Search for and select the application in the list and then click Export Metadata<\/strong> in the top right corner of the window.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Additional attributes are required to use JIT provisioning. JIT required attributes are prepopulated and are on by default to enable JIT provisioning. You can\u2019t edit the JIT required service provider attributes. You can customize the 黑料海角91入口 attribute name and the constant value for JIT required attributes. Toggle off the attributes to opt out of sending the attributes in the SAML assertion<\/p>\n\n\n\n Users are implicitly denied access to applications. After you connect an application to 黑料海角91入口, you need to authorize user access to that application. You can authorize user access from the Application Configuration<\/strong> panel or from the Groups Configuration<\/strong> panel. <\/p>\n\n\n\n To learn how to authorize user access from the Groups Configuration<\/strong> panel, see Authorize Users to an SSO Application<\/a>.<\/p>\n\n\n\n <\/p><\/div> This varies by SP.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/p><\/div> The Client ID and Secret (token) may only be shown once. Copy them to a secure location, like the 黑料海角91入口 Password Manager<\/a>, for future reference.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n The following table lists attributes that 黑料海角91入口 sends to the application. See Attribute Considerations<\/a> for more information regarding attribute mapping considerations. <\/p>\n\n\n\n\n
\n
\n
Creating a new 黑料海角91入口 Application Integration<\/strong><\/h2>\n\n\n\n
\n
\n
\n
\n
Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n
To configure 黑料海角91入口<\/strong><\/h3>\n\n\n\n
\n
\n
Download the 黑料海角91入口 metadata<\/strong> file<\/strong><\/h4>\n\n\n\n
\n
To configure Kisi<\/strong><\/h3>\n\n\n\n\n
Using JIT Provisioning<\/strong><\/h2>\n\n\n\n
To complete the provisioning process<\/strong><\/h3>\n\n\n\n
\n
Authorizing User SSO Access<\/strong><\/h2>\n\n\n\n
To authorize user access from the Application Configuration panel<\/strong><\/h3>\n\n\n\n
\n
Validating SSO user authentication workflow(s)<\/strong><\/h2>\n\n\n\n
IdP-initiated<\/strong> user workflow<\/strong><\/h3>\n\n\n\n
\n
SP-initiated<\/strong> user workflow<\/strong><\/h3>\n\n\n\n
\n
\n
Configuring the Identity Management Integration<\/strong><\/h2>\n\n\n\n
To configure Kisi<\/strong><\/h3>\n\n\n\n
\n
To configure 黑料海角91入口<\/strong><\/h3>\n\n\n\n\n
\n
Attribute Mappings<\/strong><\/h2>\n\n\n\n