ECS 3.6.2 Data Access Guide

SAML-compliant provider setup

ECS supports integration with SAML 2.0 compliant Identity Providers (IdPs). The IdP must be able to generate SAML 2.0. Here, an example with ADFS is used for demonstration purpose.

• Download the Identity Provider (ADFS) metadata file. The default URL to download ADFS metadata is https://[server-name]/FederationMetadata/2007-06/FederationMetadata.xml.
• Upload the downloaded metadata xml file when creating Identity provider for a namespace.
• To create Identity provider in the ECS Portal, perform the following:
  • Go to Manage > Identity and Access (S3) > Identity Provider.
  • Select a namespace.
  • Click NEW IDENTITY PROVIDER.
• In order to establish trust relationship between ECS and ADFS, ECS metadata xml file is required.
• To create ECS metadata file, base64 encoded Java keystore, alias that is used for the key and password is required.
• To create ECS metadata file, go to Manage > Identity and Access (S3) > SAML Service Provider Metadata. Provide the required information as mentioned above and download the metadata file.
• Establish trust relationship between ECS and ADFS using the downloaded ECS metadata file.
• Add claim rules in ADFS to add the required elements such as NameId, RoleSessionName, and Roles to the SAML authentication process.