Configuring a third-party SAML identity provider for Apigee

[ad_1]

In this article, we will look at how to set up a SAML identity provider (Auth0 in this case) for accessing the Apigees Integrated Developer Portal.

The conventional way to access the Apigee Integrated Developer Portal is through the Integrated Identity Provider option. Requires users to pass their credentials (username and password; user registration must be done if not an existing user) to the integrated portal for authentication. When you create a new portal, the built-in identity provider is configured and enabled. To understand the login experience from the user’s perspective, see Logging into the Portal Using User Credentials (Built-in Provider).

You can now configure Apigee Integrated Developer Portal with any third-party identity provider that supports SAML (Security Assertion Markup Language), a standard protocol for applying Single Sign-On (SSO). SSO authentication via SAML allows you to access your Apigee Integrated Developer Portals without having to create new accounts, using your existing accounts registered with the identity provider. The SAML integration feature is currently in preview.

Configuring SAML as the identity provider for an integrated developer portal offers the following benefits:

Set up your developer program once and reuse it across multiple integrated portals. Choose your developer program when you create your Integrated Developer Portal. Easily update or change the developer program as requirements evolve.

Take full control of user management. Connect your company’s SAML server to the Integrated Developer Portal. When users leave your organization and are centrally deprovisioned, they will no longer be able to authenticate with your SSO service to use the Integrated Developer Portal.

To configure the SAML provider, you need to configure the service provider (Apigee) and identity provider (such as Auth0) as below.

Configure the service provider (Apigee)

Select Publish > Portals in the side navigation to view the list of portals.

Click Account on the portal landing page. Alternatively, you can select Account from the portal dropdown in the top navigation bar.

Click on the Authentication tab.

In the Identity Providers section, click the SAML provider type.

Select the Enabled checkbox to enable the identity provider.

Click Save.

[ad_2]