Joget SAML Setup with Cymmetri IdP

Introduction

This Kb article outlines the recommended steps to configure Single Sign-On (SSO) between Cymmetri (Identity Provider) and Joget (Service Provider) using the SAML 2.0 protocol (IdP-Initiated flow).

This setup enables seamless authentication, allowing users to log in to Joget directly from Cymmetri without re-entering credentials.

Joget SAML Configuration

Install & Enable Plugin

1. Install the SAML Directory Manager plugin.
2. Set it as the Active Directory Manager.
   

Retrieve SP Details

Navigate to Settings > Directory Manager > SAML Configuration. Copy the following:

• Entity ID
• Assertion Consumer Service (ACS) URL
  

Enable Provisioning

Enable:

• User Provisioning Enabled
• User Attribute Update Enabled

Configure User Attributes

Set the following:

• First Name Attribute: firstName
• Last Name Attribute: lastName
• Email Attribute: email


Upload IdP Certificate

Paste the Cymmetri IdP Certificate (From the Cymmetri Configuration Configure Security Settings section) into Joget SAML configuration

Cymmetri Configuration

Create Application

1. Go to the Cymmetri Admin Portal.
2. Create a Custom Application (e.g., TestApp).

Configure SAML Settings

Set the following:

• SAML Type: IDP_INITIATED
• NameID Format: Email Address
• NameID Value: user.email

Configure Endpoints

Set the following copied from Joget earlier:

• Entity ID
• ACS URL

Configure Security Settings

1. Enable:
   • Sign Responses
   • Sign Assertions
2. Ensure that the X.509 certificate matches the downloaded certificate.
   

Attribute Mapping

Configure the Attribute Mapping section:

Download Certificate

1. Download the IdP Certificate from Cymmetri.
2. Use it in the Joget configuration.

Assign and Activate User, Login & Launch Application

1. Go to User Management in Cymmetri.
2. Select a test user and assign the Joget application(Ensure the test user details match the user information in Joget (email, first name, last name).
3. Log in to the Cymmetri User Dashboard using the test user.
4. Navigate to the My Access tab.
5. Click the application icon.

Reference Video

• SSO in Joget using Cymmetri