To add an IDP

1. Sign in to the Flex Appliance Console as a security administrator and click the gear icon in the upper-right corner of the page, then click Single sign-on.
2. Under Appliance service provider URL, copy or download the appliance metadata file. Upload that file to your IDP and add the appliance as a service provider. For more specific instructions, see the following articles on the Support website:

   • Active Directory Federation Services (ADFS)

   • IBM

   • Microsoft Azure Active Directory

   • Okta

   • Ping Federate

   • Shibboleth

3. From the IDP, download and save the IDP metadata XML file.
4. Gather the following information for the IDP:

   • Name: A name of your choosing to identify the IDP.

   • User field: The SAML attribute name that is mapped to the user attribute of the remote user domain. For example, userPrincipalName, displayName, identifier, uid, etc.

   • Group field: The SAML attribute name that is mapped to the group attribute of the remote user domain. For example, memberOf, role, etc.

5. From the Single sign-on page on the Flex Appliance Console, click Add.
6. Upload the IDP metadata file. Once the file has uploaded successfully, click View details and verify the certificate subject values and SHA-256 fingerprints.
7. Fill in the other required fields, then click Save.
8. If you have added only one IDP, enable SSO to start using it. See Enabling or disabling SSO.

   If you have added more than one IDP, the first IDP is used by default. Switch to the new IDP if necessary. See Switching to a different IDP.