Configuring Agentless Single Sign-On

Course Overview

Integrating Applications With IG
0%
Configuring Agentless Single Sign-On
0%
- Student Guide
- Workbook
- Virtual Exercise Environment
- Implementing Authentication With SSO Filter
- Create Route Using IG Studio Freeform Designer
  0%
- Demo: Create Route Using IG Studio Freeform Designer
  0%
- Lab: Create Route Using IG Studio Freeform Designer
- Configure Identity Cloud/AM as a Service
  0%
- Demo: Create Authentication Service for SSO Filter Object
  0%
- Lab: Redirect Request to AM for Authentication
- Using the SSO Filter
  0%
- Retrieve User Data From Authentication Provider
  0%
- Demo: Modify Route to Retrieve User Data From AM
  0%
- Lab: Retrieve User Profile Data
- Configure IG as HTTPS Client
  0%
- Lab: Configure IG for Client-Side HTTPS
- Lab: Access Properties in SSO Token Context
- Lab: Store Info in IG HTTP Session
- Demo: Configure Decorators in Freeform Designer
  0%
- Lab: Configure Capture Decorators in Freeform Designer
- Configuring CDSSO for Legacy App
- CDSSO Filter
  0%
- Configure CDSSO Filter Solution
  0%
- Configure CDSSO Redirect Endpoints
  0%
- Integrate Legacy App With CDSSO
  0%
- Demo: Use CDSSO Filter to Protect Website
  0%
- Lab: Create Route to Protect DVD4U With CDSSO and AM
- Demo: Access/Log In to Identity Cloud
  0%
- Lab: Prepare Identity Cloud Tenant
- Demo: Modify DVD4U/FEC Route to Use CDSSO
  0%
- Lab: Protect DVD4U/FEC Using CDSSO
- Demo: Implement DVD4U Login
  0%
- Lab: Update DVD4U Route to Log In User
- Performing SSO With IG as OIDC Relying Party
- Basic OIDC
  0%
- Configure IG as OIDC Client
  0%
- Examine Flow of OIDC Redirects
  0%
- Demo: Create OAuth2 Client Filter Route to Redirect to OIDC Provider
  0%
- Lab: Configure OIDC Relying Party Route
- Explore Flow of OIDC Callbacks and Data Injection
  0%
- Demo: Capture OIDC Flow and Attribute Context Data
  0%
- Lab: Examine OIDC Relying Party Solution
- Providing SSO With IG as SAML2 SP
- Authenticate With SAML2 IdP
  0%
- SAML Federation Handler
  0%
- Demo: Create Route for SAML2 Interaction
  0%
- Lab: Configure SAML2 Route for Trial Section
- Dispatch Handler
  0%
- SAML2 Implementation Flow
  0%
- Demo: Prepare and Examine IG SAML2 Configuration
  0%
- Lab: Set Up SAML2 Configuration Files
- Lab: Examine SAML2 Solution (Optional)
Controlling Access with IG as Policy Enforcement Point
0%
Protecting a REST API
0%
Preparing for Production with IG
0%

Add authentication to the FEC solution, using Identity Cloud or AM as the access manager, OIDC provider, and SAML2 identity provider.

Not yet accessed

Student Guide

Configuring Agentless Single Sign-On

This student guide contains your slides and instructor notes.

Access with a Pass

Not yet accessed

Workbook

Configuring Agentless Single Sign-On

Your workbook contains all your exercise instructions and should be used together with your exercise environment.

Access with a Pass

Not yet accessed

Virtual Exercise Environment

Configuring Agentless Single Sign-On

This brings you to your virtual exercise environment where you can complete your exercises using your workbook. Your lab exercises are chapter-based.

Access with a Pass

Implementing Authentication With SSO Filter

Create Route Using IG Studio Freeform Designer

Create a route using the IG Studio freeform designer to protect a website.

heap route handler filter freeform

Demo: Create Route Using IG Studio Freeform Designer

Demonstrate how to use IG Studio Freeform Designer to create a route, use drag and drop techniques ...

heap reverse proxy chain am service

Access with a Pass

Lab: Create Route Using IG Studio Freeform Designer

Create a route with the IG Studio freeform designer with a variety of configuration objects and ...

lab exercise reverse proxy chain am service heap

Configure Identity Cloud/AM as a Service

Protect a website by configuring a SingleSignOnFilter that uses an AmService object to redirect the ...

agentless sso websockets IG freeform AM

Demo: Create Authentication Service for SSO Filter Object

Demonstrate how to create an AmService and then create a SingleSignOnFilter object that uses the ...

route filter chain handler am service

Access with a Pass

Lab: Redirect Request to AM for Authentication

Complete the AM configuration to match the IG configuration of the AmService and SingleSignOnFilter ...

lab exercise route filter chain handler am service

Using the SSO Filter

Configure a SingleSignOnFilter to use an AmService to authenticate with an AM server before ...

sso AM chain handler filter (1 more)

Retrieve User Data From Authentication Provider

Configure IG with a UserProfileFilter to obtain the authenticated user's name that can be shared ...

session chain filter ux

Demo: Modify Route to Retrieve User Data From AM

Demonstrate how to add a UserProfileFilter to a route to retrieve user data from AM.

am test route filter

Access with a Pass

Lab: Retrieve User Profile Data

Retrieve user profile information from AM and share the information with a protected application.

lab exercise test route filter AM

Configure IG as HTTPS Client

Configure IG, as a client, to trust a self-signed certificate of a proxied application or an ...

secure identity cloud keystore AM override am service

Access with a Pass

Lab: Configure IG for Client-Side HTTPS

Configure IG as a client to communicate securely with AM using HTTPS.

lab exercise truststore AM IG

Access with a Pass

Lab: Access Properties in SSO Token Context

Explore context information about requests and responses available for IG to use in conditions and ...

documentation lab exercise sso ig routes handlers

Access with a Pass

Lab: Store Info in IG HTTP Session

Add a filter that stores values in the HTTP session of the IG context to track unique URI paths ...

configure lab exercise reverse proxy filter session variable

Demo: Configure Decorators in Freeform Designer

Demonstrate, using the various object configuration forms, how to configure capture points with the ...

test log freeform decorate

Access with a Pass

Lab: Configure Capture Decorators in Freeform Designer

Explore how to add a global capture decorator to a route developed with the IG Studio freeform ...

lab exercise test log freeform decorate

Configuring CDSSO for Legacy App

CDSSO Filter

Explain the issues with using SSO and applications in different domains, and introduce the ...

CDSSO Filter

Configure CDSSO Filter Solution

Describe how to configure the CrossDomainSingleSignOnFilter with Identity Cloud and AM as a solution ...

am configure sso identity cloud filter

Configure CDSSO Redirect Endpoints

Describe the purpose and configuration of some IG filters reserved to redirect URL endpoints, such ...

endpoint am configure sso identity cloud (2 more)

Integrate Legacy App With CDSSO

Implement the final DVD4U legacy application integration with CDSSO to authenticate the user, and ...

sso filter

Demo: Use CDSSO Filter to Protect Website

Demonstrate how a completed route with the CDSSO Filter is configured to use a self-managed AM ...

am sso modify test freeform

Access with a Pass

Lab: Create Route to Protect DVD4U With CDSSO and AM

Create a route to protect the DVD4U website with SSO by using a CrossDomainSingleSignOnFilter ...

am lab exercise sso modify test (1 more)

Demo: Access/Log In to Identity Cloud

Demonstrate how to access the Identity Cloud tenant, log in as the Identity Cloud administrator, ...

configure identity cloud rest IG agent

Access with a Pass

Lab: Prepare Identity Cloud Tenant

Access your assigned Identity Cloud tenant, configure a REST admin user, run Postman collection ...

configure lab exercise identity cloud rest IG agent

Demo: Modify DVD4U/FEC Route to Use CDSSO

Demonstrate how to modify the DVD4U or FEC route to use CDSSO with an AmService configured with ...

identity cloud configure sso test

Access with a Pass

Lab: Protect DVD4U/FEC Using CDSSO

Modify the IG routes that protect the FEC and DVD4U websites with a CrossDomainSingleSignOnFilter ...

configure lab exercise sso identity cloud test

Demo: Implement DVD4U Login

Demonstrate how to access the DVD4U website after modifying the PasswordReplayFilter to use the ...

am sso test filter

Access with a Pass

Lab: Update DVD4U Route to Log In User

Add the PasswordReplayFilter to the 102_dvd4u route to automate signing in to the DVD4U login page ...

test am lab exercise sso filter

Performing SSO With IG as OIDC Relying Party

Basic OIDC

Review OIDC concepts and players, and explain how IG can be used as an OIDC client.

authorization oidc

Configure IG as OIDC Client

Describe how to configure IG as an OIDC client by creating a route with the OAuth2ClientFilter, ...

endpoints authorization oidc

Examine Flow of OIDC Redirects

Examine the OIDC process flow of how the IG AuthorizationCodeOAuth2ClientFilter redirects the user ...

consent endpoint ig authenticate

Demo: Create OAuth2 Client Filter Route to Redirect to OIDC Provider

Demonstrate how to create a route that uses the OAuth2ClientFilter, and optionally uses the new ...

oidc attributes

Access with a Pass

Lab: Configure OIDC Relying Party Route

Create an OIDC relying party route configuration in IG to enable non-subscriber users to access the ...

lab exercise oidc OAuth2

Explore Flow of OIDC Callbacks and Data Injection

Explore the process flow of how IG handles callbacks from the OIDC Provider and how IG injects OIDC ...

authorization oidc IG

Demo: Capture OIDC Flow and Attribute Context Data

Demonstrate how to use a capture decorator or the Developer Tools in a web browser with the route ...

oidc IG

Access with a Pass

Lab: Examine OIDC Relying Party Solution

Enable capture logs for the OIDC route and examine the attributes written in the route log file ...

lab exercise oidc IG

Providing SSO With IG as SAML2 SP

Authenticate With SAML2 IdP

Describe delegation of authentication to a SAML2 IdP.

authentication saml2

SAML Federation Handler

Describe how the SamlFederationHandler can be used to play the role of a SAML2 SP.

authentication saml2 IG handler endpoint config

Demo: Create Route for SAML2 Interaction

Demonstrate the route with a DispatchHandler that handles the SAML2 flow scenarios.

dispatch saml2 handler

Access with a Pass

Lab: Configure SAML2 Route for Trial Section

Configure SAML2 for subscribers to access the FEC trial section of the website by signing in with ...

lab exercise saml2 reverse proxy chain handler

Dispatch Handler

Describe the DispatchHandler and its configuration structure.

saml2 handler

SAML2 Implementation Flow

Describe the flow of the SAML2 implementation using the DispatchHandler route design.

authentication saml2 handler protected

Demo: Prepare and Examine IG SAML2 Configuration

Demonstrate how to extract the fedlet files for the IG SAML2 configuration, and access the IdP ...

saml2 IG GovIDP

Access with a Pass

Lab: Set Up SAML2 Configuration Files

Examine the GovIdP environment and create the SAML configuration folder for IG.

lab exercise saml2 IG GovIDP

Access with a Pass

Lab: Examine SAML2 Solution (Optional)

Examine the SAML2 solution details by observing the content output for a login session, the SAML2 ...

lab exercise saml2 IG

Next chapter: Controlling Access with IG as Policy Enforcement Point