Ideagen Luminate logo Ideagen Luminate logo
Navigation
Need help?
Send feedback
Sign in
This page does not meet FedRAMP security standards. Please avoid entering sensitive or classified information. Learn more
Learn more
Learn more

Looking for help?

Common queries

View all

Send us feedback

Megaphone illustration

Before you start

This form is for Ideagen Luminate feedback only. Your submission will not receive a response.

Looking for support? Select the solution you need help with and open a ticket with us.
New article Recently updated

Configuring Single Sign-On (SSO) providers

By Lia Bartosz
  • Last updated
⌘ K
Search this article
Print this article
Who is this article for?

Administrators responsible for managing the system.

Administration module access is required.

To be able to enable Single Sign-On (SSO) as an authentication method on your system, you must first register with the identity provider. When doing so, make sure that all accounts you add use the same email address as the one associated with their Quality Management accounts.

This article takes you through the process of registering with the supported identity providers. Before you start, access the service provider information within Quality Management as you will need to refer to it throughout.

1. Configuring Entra ID

Entra ID (formerly Azure) is an access management solution offered by Microsoft.

To configure Entra ID:

  1. Access the Microsoft Azure portal.
  2. Select Enterprise applications.

Select 'Enterprise applications'

  1. Click New application.

Click 'New application'

  1. Click Create your own application.

Click 'Create your own application'

  1. Enter Ideagen Quality Management (Core) as the name.
    Leave the other options as they are.
  2. Click Create.
    You will be taken to an overview page for the app.

Click 'Create'

  1. Access Single sign-on settings.

Click 'Single sign-on'

  1. Click the SAML card.

Click 'SAML Rich and secure authentication to applications using the SAML (Security Assertion Markup Language) protocol.'

  1. Click Edit (Basic SAML configuration).

Click 'Edit'

  1. Open Quality Management in a separate tab.
  2. Access the Administration module.
  3. Select System Settings.
  4. Switch to the Passwords tab.
  5. Copy the Identifier field.

Copy the Identifier

  1. Return to the Azure portal.
  2. Click Add identifier.

Click 'Add identifier'

  1. Paste the copied identifier.
  2. Copy the Reply URL.

Click 'https://our.qualtraxcloud.com/Saml2/Acs'

  1. Click Add reply URL.
  2. Paste the copied URL.

Click 'Add reply URL'

  1. Click Save.

Click 'Save'

  1. Click Edit (Attributes and Claims).

Click 'Edit'

  1. Click the required claim value.

Click the required claim value

  1. Select user.mail from the Source attribute dropdown.
Select user.mail
  1. Enter emailaddress in the Name field.
  2. Enter the schema the Namespace field.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

Click 'Save'

  1. Navigate back to the main configuration page.

Return to the overview

  1. Click Edit (SAML certificates).

Click 'Edit'

  1. Select SAML response and assertion from the Signing options dropdown.
  2. Click Save.

Select Sign SAML response and assertion

  1. Download the certificate.

Download the file

  1. Return to Quality Management.
  2. Click Add (under Identity Providers).

Click 'Add'

  1. Enter a Name for your provider.

Add a name

  1. Copy the Microsoft Entra identifier.

Switch to 'portal.azure.com'

  1. Paste it the Entity ID field.

Fill 'https://sts.windows.net/0ac7ad68-3a9b-40a5-824d-e46fb1bf3acb/'

  1. Copy the Login URL.

Copy the Login URL

  1. Paste it into the Redirect URL field.

Paste the copied URL

  1. Copy the Logout URL.

Switch to 'portal.azure.com'

  1. Paste it into the Logout URL field.

Fill 'https://login.microsoftonline.com/0ac7ad68-3a9b-40a5-824d-e46fb1bf3acb/saml2'

  1. Click Choose File.
  2. Select the certificate you downloaded.

Fill 'C:\fakepath\IQME.cer'

  1. Tick Enabled.

Fill 'on'

  1. Click Save Changes.
This video walkthrough illustrates the SAML response signed configuration steps.

1. Configuring Google SSO

Google SSO is an authentication solution offered by Google.

1.1. SAML response signed

In this setup, Google signs the Response, and Ideagen Quality Management (Core) verifies the Response signature. This is the most common configuration.

To enable this configuration:

  1. Start by accessing the Google Workspace via the Admin console.
  2. Choose Web and mobile apps from the list on the left.
Start
  1. Click Add app.
Click on 'Add app'
  1. Select Add custom SAML app from the list.
Click 'Add custom SAML app'
  1. Enter our-iqme as the App name.
Click 'Continue'
  1. Click Continue button.
Click 'Continue'
  1. Copy the SSO URL value.
Copy 'SSO URL' value
  1. Open Quality Management in a separate tab.
  2. Access the Administration module.
  3. Select System Settings.
  4. Switch to the Passwords tab.
Click 'Add' of Identity Providers Section
  1. Click Add in the Identity Providers section.
Click 'Add' of Identity Providers Section
  1. Paste the previously copied value into the Redirect URL field.
Switch to 'our.qualtraxcloud.com'
  1. Switch back to Google Workspace.
  2. Copy the Entity ID value.
Copy 'Entity ID' value
  1. Return to Quality Management.
  2. Paste the copied value into the Entity ID field.
Switch to 'our.qualtraxcloud.com'
  1. Go back to Google Workspace.
  2. Click the Arrow to download the certificate.
Click 'Download icon' to download the 'Certificate'
  1. Switch to Quality Management.
  2. Click Choose file.
  3. Select the certificate you previously downloaded.
Click 'Choose File' to upload the downloaded certificate
  1. Enter the provider identifier into the Name field.
Uncheck 'Verify Assertion Signed'
  1. Untick Verify Assertion Signed.
Uncheck 'Verify Assertion Signed'
  1. Tick Enabled.
Check 'Enabled'
  1. Click Save Changes.
  2. Return to Google Workspace.
  3. Click Continue.
Click 'Continue'
  1. Copy the Identifier (Entity Id) value in Quality Management.
Copy 'Identifier (Entity Id)'
  1. Paste it into the Entity ID field in Google Workspace.
Paste the 'Identifier (Entity Id)' value to 'Entity ID'
  1. Copy Reply URL value.
Copy 'Reply URL'
  1. Paste it into the ACS URL field.
Paste the 'Reply URL' value to 'ACS URL'
  1. Tick Signed response.
Check 'Signed response'
  1. Open the Name ID format dropdown.
  2. Select EMAIL.
Click 'Name ID format' dropdown
  1. Click Continue.
Click 'Continue'
  1. Click Add mapping (under Attributes).
Click 'Add mapping'
  1. Open the Google directory attributes dropdown.
  2. Select Primary email.
Click 'Primary email'
  1. Enter the schema into the App attributes field.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
Click 'Finish'
  1. Click Finish.
  2. Expand the User access section.
Click 'Expand icon' of 'User access' section
  1. Set Service status to Select ON for everyone.
Click 'ON for everyone'
  1. Click Save.
Click 'Save'

1.2. Assertion response signed

In this setup, Google signs the Assertion instead of the Response, and Ideagen Quality Management (Core) verifies the Assertion signature.

To enable this configuration, follow the same steps as above, except this time:

  1. Untick Signed Response in Google Workspace.
  2. Tick Verify Assertion Signed in Ideagen Quality Management (Core).
  3. Untick Verify SAML Response Signed in Ideagen Quality Management (Core).

1. Configuring Okta SSO

Okta SSO is an authentication solution offered by Okta.

To configure Okta SSO:

  1. Access the Okta portal.
  2. Open the Applications section.
Open Applications
  1. Select Applications.
Select Applications
  1. Click Create App Integration.
Click 'Create App Integration'
  1. Select SAML 2.0 as the Sign-in method.
  2. Click Next.
Fill 'saml'
  1. Enter Ideagen Quality Management (Core) into the App name field.
  2. Click Next.
Enter app name
  1. Enter the Recipient URL from your Quality Management (Essentials) system.
Paste in URL
  1. Provide the Audience URI.
Paste in
  1. Scroll down to the Attribute Statements section.
  2. Open the Name format dropdown.
  3. Choose URI Reference.
Choose 'URI Reference'
  1. Open the Value dropdown.
  2. Choose user.email.
Choose 'user.email'
  1. Enter the schema in the Name field.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  1. Click Next.

Enter the schema in the Name field.

  1. Click Finish to complete the setup.

Click 'Finish'

  1. Access Actions for the certificate.

Open Actions

  1. Select Download certificate.

Click 'Download certificate'

  1. Scroll up to the SAML 2.0 entry.
  2. Click More details.

Click 'More details'

  1. Copy the Issuer URL.

Copy Issuer URL

  1. Switch to your Quality Management (Essentials) site.
  2. Enter Okta SSO in the Name field.

Fill 'Okta SSO'

  1. Paste in the copied Issuer URL in the Entity Id field.

Enter the copied URL.

  1. Go back to Okta.
  2. Copy the Sign on URL.

Copy Sign on URL

  1. Paste it into the Redirect URL field.

Paste your copied Sign on URL into 'Redirect URL' field

  1. Copy the Sign out URL.

Copy Sign out URL

  1. Paste it into the Logout URL field.

Paste your copied sign out URL into 'Logout URL' field

  1. Upload the downloaded certificate file.

Upload certificate

  1. Tick Enabled to activate the provider.

Tick 'Enabled'

  1. Click Save Changes.

1. Configuring OneLogin

OneLogin is an access management solution offered by One Identity.

To configure OneLogin:

  1. Access the OneLogin portal.
  2. Open the Applications tab.
  3. Click Applications.

Click 'Applications'

  1. Click Add App.

Click 'Add App'

  1. Search for saml test.

Click 'SAML Test Connector (IdP)'

  1. Select SAML Test Connector (IdP) from the results.

Click 'SAML Test Connector (IdP)'

  1. Enter Ideagen Quality Management (Core) in the Display Name field.
  2. Click Save.

Click 'Save'

  1. Navigate to Configuration settings.

Click 'Configuration'

  1. Open Quality Management in a separate tab.
  2. Access the Administration module.
  3. Select System Settings.
  4. Switch to the Passwords tab.
  5. Copy the Identifier field.

From the Identity [Entity Id] textbox, copy the URL.

  1. Paste the copied value into the Audience field.

Fill in the copied text into Recipient textbox

  1. Copy the Reply URL,

Copy the Reply URL text

  1. Paste the copied value into Recipient, ACS (Consumer) URL Validator, and ACS (Consumer) URL fields.
  2. Click Save.

Click 'Save'

  1. Access the Parameters section.

Click 'Parameters'

  1. Click the Add button.

Click on the 'Add' button

  1. Enter the email schema into the Field name.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

Enable the 'Include in SAML assertion' option

  1. Tick the Include in SAML assertion flag.
  2. Click Save.

Click 'Save'

  1. Select Email from the Value dropdown.
  2. Click Save.

Click 'Email'

  1. Go to the SSO section.

Click 'SSO'

  1. Click View Details under the certificate.

Click 'View Details'

  1. Click Download.

Click 'Download'

  1. Go back to Quality Management.
  2. Click Add (under Identity Provider).

Under Identity Provider, click on the Add button

  1. Enter OneLogin in the Name field.

Click on 'Entity Id' textbox

  1. Go back to the OneLogin portal and copy the Issuer URL.

Copy the Issuer URL

  1. Switch to your Quality Management page and paste it into the Entity ID field.

Fill in the copied URL into Entity Id textbox

  1. Copy the SAML 2.0 Endpoint (HTTP) URL from the OneLogin portal.

Copy the SAML 2.0 Endpoint (HTTP) URL

  1. Paste the copied URL into Redirect URL field in Quality Management.

Fill in the copied URL into Redirect URL textbox

  1. Click Choose file.
  2. Select the certificate you previously downloaded.

Click on 'Choose File' for uploading the Certificate file

  1. Tick Enabled.

Fill 'on'

  1. Click Save Changes.
  2. Go back to the OneLogin portal.
  3. Open the Users tab.
  4. Select Users.

Click 'Users'

  1. Open your user account.

Click on your user(s)

  1. Open the Applications section.

Click 'Applications'

  1. Click the Add button.

Click on the Add button

  1. Select the method you previously created.
  2. Click Continue.

Select your application

Further reading

What do you think about this article?

Your feedback helps us improve

More articles in this section

Looking for more help? Ask the Community

On this page