VIPRE Cloud supports using SAML, allowing for integration with SSO identity providers.

What is SAML?

SAML (Security Assertion Markup Language) is an open standard that allows for authentication and authorization between an identity provider (IDP) and a service provider (SP).

Configuration

SAML configuration occurs in the IDP admin portal and the VIPRE Cloud admin portal. 

We've provided Okta-specific instructions for configuring SAML with VIPRE Cloud for single sign-on below. If your IDP is not Okta, you can still use the instructions below as a general guide. If you require further assistance, contact Technical Support.

1. Log in to your VIPRE Cloud portal
2. On the left-side menu, find SETUP
3. Click System, then select SAML
4. Click Configure SAML 

5. You will presented with Service Provider Metadata, giving you options to download the XML or copy the metadata and manually add it to your IDP
   1. For this example, we are going to copy the metadata manually
6. Open a separate browser tab and navigate to your Okta admin portal
7. In your Okta portal, select Applications > Applications on the left-side menu
8. In the main part of the screen, select Add Application
9. Click Create a New App in the top-right 
10. Select SAML 2.0 as the Sign on Method and click Create
11. On the General tab, under SAML Settings, click Edit
    • App name can be any name you want to use to identify the VIPRE Cloud application within Okta
    • All other options are based on your organization's desired decisions
12. Click Next to get to the Configure SAML screen within Okta
13. Go back to the browser tab that has your VIPRE Cloud portal open and copy the Entity ID from the Service Provider Metadata screen
14. In the browser tab that you're using for Okta, paste the Entity ID into the Audience URI (SP Entity ID) field
15. Go back to the browser tab that has your VIPRE Cloud portal open and copy the Single Sign On URL from the Service Provider Metadata 

16. In the browser tab that you're using for Okta, paste the Single Sign On URL into the Single sign on URL field
17. Under Single sign on URL, Use this for Recipient URL and Destination URL should already be checked by default
18. Ensure the following configurations are set in your Okta portal:
    • Name ID format should be set to EmailAddress
    • Application username should be set to Email
19. Scroll to the bottom of the page and click Next
20. Click Finish

VIPRE Cloud is now configured in Okta. The next step is to configure Okta in VIPRE Cloud.

21. You will see the Okta Application screen; click on the Sign On tab to find the Identity Provider Metadata
22. In a separate browser tab, navigate to the MetadataURL from Okta and download the XML file
23. Go back to the browser tab with VIPRE Cloud portal and click Next to get to the Identity Provider Metadata page
24.  Drag and drop the XML file in the box or click Select a file… to upload the XML file you downloaded in Step 22 above

25. The Entity ID and Single Sign On URL will be filled in; next to Provider Name, enter how you want this to appear on the VIPRE Cloud sign-in page
26. Click Next
27. Here, we will test our SAML setup
    1. Step 1: Copy the login URL into a new browser tab
       1. You should see the login page for your IDP
    2. Step 2: Enter your credentials and log in to your IDP
    3. Step 3: Review the results of the test

If you need to review the log or redo the test, you can complete those actions at the bottom of the page.

28. Click Next
29. The SAML Configuration Summary page allows you to see all of the settings in one place; when you are ready, click Save & Enable

Once SAML is enabled for all users, you can choose to enforce SSO login only, deactivating password authentication.

Congratulations! SAML SSO is now configured for use with your VIPRE Cloud site.