SAML (Security Assertion Markup Language) is an open standard that allows identity providers to securely transmit login credentials to a service provider. The FM Portal can be configured as a service provider. By configuring the FM Portal as a service provider, single sign-on can be implemented.
Prerequisites
You have administrative rights in the portal.
You have obtained a certificate for the portal from the identity provider’s certificate authority.
Procedure in the FM Portal
Prepare certificates:
Path to the starting point: Control Panel - Portal Options - Global Basic Data - Certificates
Note: You can create certificates via the FM Portal or import an existing certificate.
First, create a certificate entry. To do this, click New....
In the Manage Certificate section, click the ellipsis icon.
If you have a self-created .pfx file, click Import Certificate and select your certificate.
If you want to create a certificate, click the Create .cer Certificate or Create .pfx
Certificate button and assign a password. Activate your certificate!Click Save in the toolbar.
Configuring the Portal as a Service Provider
Go to Control Panel - Portal Options - Interfaces - Interface Configuration - SAML - Local Service Provider. Click New... to create the service provider entry.
Enter a name for your organization and fill in the remaining fields.
For the Certificate Authentication and Certificate Encryption entries, select the certificate entry you created
earlier.Close the entry and reopen it.
At the bottom of the Service Provider section, click Export Metadata.
Import the generated XML file into the desired identity provider.
Configuring an Identity Provider
Go to Control Panel - Portal Options - Interfaces - Interface Configuration - SAML - Identity Provider.
Click New... in the toolbar of the list. An empty form will open.
Click Import Metadata and select the metadata file you obtained from the identity provider.
Fill in the Code field and check the Active box.
Tip: In the Login Image section, you can upload an image file to be displayed as the login button on the login page in the FM Portal.
Click Save in the toolbar