home

Security Service Edge

Mobile Endpoint SecuritySecurity Service Edge
Mobile Endpoint SecuritySecurity Service Edge

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Show Contents

Security Service Edge

Configure Single Sign-On (SSO)

Create Cloud Service and Identity Provider SSO Providers

  1. From the Management Console, select Administration > Enterprise Integration.
  2. Select Single Sign-on from the menu.

    The Single Sign-On page includes three tabs.

    • The SSO Groups tab lists the default SSO group, and any groups you have created. All SSO providers are associated with a group.
    • The SSO Providers tab lists the SSO providers you create. You will need to create an SSO provider for each service provider (for example, one for each onboarded cloud), and one for the IdP being used in your enterprise.

    • The Identity Proxy Routing tab is where you create the Secure Cloud Access IdP proxy routing

      -- the association between your SP and IdP through SSO providers created in Secure Cloud Access.

  3. In the SSO Providers tab, click New.

    In the next steps, you will create at least two SSOs: One for each onboarded cloud you want to include in the Secure Cloud Access IdP proxy routing, and one for the IdP you use in your enterprise for single sign-on.

  4. Create an SSO provider to represent the cloud service provider (SP).
    1. Enter information for the provider.
      Fields with a colored border on the left require a value.
      • Name - Enter a descriptive name.
      • Type - Select Cloud Service Provider.
      • SSO Group -- Select the group for this provider.
      • Description (optional) - Enter information that describes this SSO provider.
      • Metadata link - Provide the SSO metadata for your SP, either by entering a link where it is accessible or by uploading a metadata file downloaded from the SSO setup for the SP. The Validate button becomes active.
    2. Click Validate.

      After a few seconds, the system validates the metadata, and enters a URL for the service provider in the Entity Id field.

    3. Click Save.
    4. If needed, create SSO providers for additional service providers.
  5. Create an SSO provider for the identity provider (IdP).
    1. Enter the following information.
      Fields with a colored border on the left require a value.
      • Name - Enter a descriptive name for this SSO provider.
      • Type - Select Identity Provider.
      • SSO Group -- Select the same SSO group for this provider as you selected for the Service Provider type.
      • Description (optional) - Enter descriptive text for this SSO provider.
      • Metadata link - Provide the metadata for the IdP from your SSO setup, either by entering a link or by uploading a metadata file downloaded from the SSO setup for the IdP.
    2. Click Validate.

      After a few seconds, the system validates the metadata, and enters a URL for the identity provider in the Entity Id field.

    3. Click Save.

Last updated: November 20, 2024

lookout-footer

Legal Privacy Policy Cookie Policy Transparency Report Compliance Info Compliance Info (Gov)

© 2024 Lookout, Inc. LOOKOUT®, the Lookout Shield Design®, LOOKOUT with Shield Design® and the Lookout multi-color/multi-shaded Wingspan Design® are registered trademarks of Lookout, Inc. in the United States and other countries. DAY OF SHECURITY®, LOOKOUT MOBILE SECURITY®, and POWERED BY LOOKOUT® are registered trademarks of Lookout, Inc. in the United States. Lookout, Inc. maintains common law trademark rights in EVERYTHING IS OK, PROTECTED BY LOOKOUT, CIPHERCLOUD, and the 4 Bar Shield Design.