Below is an example of how to configure dotCMS to authenticate and authorize dotCMS users with RSA using SAML . It requires a number of custom attributes to be set in order to successfully connect, authenticate and also sync roles from RSA to dotCMS.
Please read the full set up instructions for RSA SAML with dotCMS
Example Custom Attributes Required for dotCMS and RSA SAML
Below are a list of custom attributes from a working RSA installation. The value containing “ClientDomain” should obviously be replaced with correct values for the RSA endpoint and the dotCMS server location. If you are cutting and pasting, please make sure not to include leading or trailing spaces in the values.
Key | Value |
---|---|
authn.protocol.binding | Http-POST-Raw |
bindingtype | urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST |
role.extra | DOTCMS_BACK_END,CMS Administrator |