Ideagen Luminate logo Ideagen Luminate logo
Navigation
Need help?
Send feedback
Sign in
This page does not meet FedRAMP security standards. Please avoid entering sensitive or classified information. Learn more
Learn more
Learn more

Looking for help?

Common queries

View all

Send us feedback

Megaphone illustration

Before you start

This form is for Ideagen Luminate feedback only. Your submission will not receive a response.

Looking for support? Select the solution you need help with and open a ticket with us.
New article Recently updated

Configuring Single Sign-On (SSO) to Mazlan Home for Ideagen Quality Management Core

By Stef Brown
  • Last updated
⌘ K
Search this article
Print this article

Who is this article for?

Administrators responsible for managing the system.

Administration module access is required.

This article takes you through the steps required to setup Single Sign-On (SSO) between Mazlan Home (formerly Ideagen Hub) and Ideagen Quality Management Core. 

This article is specifically for customers whose users access Ideagen Quality Management Core through Mazlan Home and need to configure their Identity Provider (IdP) for the Mazlan Home and Ideagen Quality Management Core SSO integration. 

For customers who are not integrated with Mazlan Home, including on-premise customers who do not integrate with Mazlan Home, refer to the Help article to configure SSO directly with Ideagen Quality Management Core.

Step 1: Gathering information

Before you start, access the service provider information within Mazlan Home as you will need this information for Step 2.

To access the service provider information:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Copy the Entity ID and Reply URL shown on this screen. You will need this information for Step 2.

    image-20260824-133001.png

Step 2: Configuring Entra ID

Entra ID (formerly Azure) is an access management solution offered by Microsoft.

To configure Entra ID:

  1. Access the Microsoft Azure portal.
  2. Select Enterprise applications.

Select 'Enterprise applications'

  1. Click New application.

Click 'New application'

  1. Click Create your own application.

Click 'Create your own application'

  1. Enter Ideagen Quality Management (Core) as the name.
    Leave the other options as they are.
image-20260824-134850.png
  1. Click Create.
    You will be taken to an overview page for the app.

Click 'Create'

  1. Access Single sign-on settings.

Click 'Single sign-on'

  1. Click the SAML card.

Click 'SAML Rich and secure authentication to applications using the SAML (Security Assertion Markup Language) protocol.'

  1. In the Basic SAML Configuration section, click Edit.

Click 'Edit'

  1. Click Add identifier.

     

image-20260810-143409.png

  1. Paste the copied identifier from Mazlan Home (see Step 1: Gathering information) into the Entity ID field in Entra, then click Save.

image-20260810-150011.png
  1. Click Add reply URL.
image-20260810-142945.png
  1. Paste the copied URL from Mazlan Home (see Step 1: Gathering information) into the Reply URL field in Entra, and Save.
image-20260810-151206.png
  1. In the Attributes and Claims section, click Edit. 

Click 'Edit'

  1. Click the required (Unique User Identifier) claim.
image-20260806-033314.png
  1. Select user.mail from the Source attribute dropdown.

Select user.mail

  1. Enter emailaddress in the Name field.
  2. Enter the schema in the Namespace field, then click Save.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

Click 'Save'

  1. Navigate back to the main configuration page.

Return to the overview

  1. In the SAML certificates section, click Edit. 

Click 'Edit'

  1. Select SAML response and assertion from the Signing options dropdown.
  2. Click Save.

Select Sign SAML response and assertion

  1. Download the federation metadata; you will use it in Step 3.
image-20260810-152721.png

Step 3: Setting up SSO in Mazlan Home

Once your identity provider is configured in Step 2, load its metadata into Mazlan Home to complete the connection. Mazlan Home accepts either a metadata file or a metadata URL.

To load the metadata:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Select for IDP configuration type.

image-20260824-144126.png
  1. Click Next.
  2. For SAML Configuration:

  • Add a Provider Name that will be displayed as the label on the login screen.

image-20260824-144220.png

  • Scroll down to Metadata Document Source. 

  • Update the metadata by either uploading the file or pasting the metadata URL.

image-20260824-144710.png
  1. Copy the value below into the email and preferred_username attributes:
image-20260902-035631.png
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  1. Click Apply configuration.

Step 1: Gathering information

Before you start, access the service provider information within Mazlan Home as you will need this information for Step 2.

To access the service provider information:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Copy the Entity ID and Reply URL shown on this screen. You will need this information for Step 2.

    image-20260824-133001.png

Step 2: Configuring Google Workspace

Google Workspace SSO is an authentication solution offered by Google.

2.1. SAML response signed

In this setup, Google signs the Response, and Ideagen Quality Management Core verifies the Response signature. This is the most common configuration.

To enable this configuration:

  1. Open the Google Workspace Admin console.
  2. Choose Web and mobile apps from the list on the left.

Start

  1. Click Add app.

Click on 'Add app'

  1. Select Add custom SAML app from the list.

Click 'Add custom SAML app'

  1. Enter our-iqme or Mazlan Home as the App name.

Click 'Continue'

  1. Click the Continue button.

Click 'Continue'

  1. Under Option 1: Download IdP metadata, click DOWNLOAD METADATA.
image-20260824-141229.png
  1. Save the file. You will need this to complete Step 3.
  2. Click the Continue button.

Click 'Continue'

  1. Under Service provider details, enter the Reply URL from Step 1 in the ACS URL field.
image-20260824-110304.png
  1. Enter the Entity ID from Step 1 in the Entity ID field.

Paste the 'Identifier (Entity Id)' value to 'Entity ID'

  1. Tick Signed response.

Check 'Signed response'

  1. Open the Name ID format dropdown.
  2. Select EMAIL.

Click 'Name ID format' dropdown

  1. Click Continue.

Click 'Continue'

  1. Under Attributes, click Add mapping.

Click 'Add mapping'

  1. Open the Google directory attributes dropdown.
  2. Select Primary email.

Click 'Primary email'

  1. Enter the schema into the App attributes field.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

Click 'Finish'

  1. Click Finish.
  2. Expand the User access section.

Click 'Expand icon' of 'User access' section

  1. Set Service status to Select ON for everyone.

Click 'ON for everyone'

  1. Click Save.

Click 'Save'

2.2. Assertion response signed

In this setup, Google signs the Assertion instead of the Response, and Ideagen Quality Management Core verifies the Assertion signature.

To enable this configuration, follow the same steps as above, except this time:

  1. Untick Signed Response in Google Workspace.
  2. Tick Verify Assertion Signed in Ideagen Quality Management Core.
  3. Untick Verify SAML Response Signed in Ideagen Quality Management Core.

Step 3: Setting up SSO in Mazlan Home

Once your identity provider is configured in Step 2, load its metadata into Mazlan Home to complete the connection. Mazlan Home accepts either a metadata file or a metadata URL.

To load the metadata:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Select for IDP configuration type.

image-20260824-144126.png
  1. Click Next.
  2. For SAML Configuration:

  • Add a Provider Name that will be displayed as the label on the login screen.

image-20260824-144220.png

  • Scroll down to Metadata Document Source. 

  • Update the metadata by either uploading the file or pasting the metadata URL.

image-20260824-144710.png
  1. Copy the value below into the email and preferred_username attributes:
image-20260902-035631.png
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  1. Click Apply configuration.

Step 1: Gathering information

Before you start, access the service provider information within Mazlan Home as you will need this information for Step 2.

To access the service provider information:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Copy the Entity ID and Reply URL shown on this screen. You will need this information for Step 2.

    image-20260824-133001.png

Step 2: Configuring Okta

Okta SSO is an authentication solution offered by Okta.

To configure Okta SSO:

  1. Access the Okta portal.
  2. Open the Applications section.

Open Applications

  1. Select Applications.

Select Applications

  1. Click Create App Integration.

Click 'Create App Integration'

  1. Select SAML 2.0 as the Sign-in method.
  2. Click Next.

Fill 'saml'

  1. Enter Mazlan Home or Ideagen Quality Management Core into the App name field.
  2. Click Next.

Enter app name

  1. In the Single sign-on URL field, enter the Reply URL from Step 1.
  2. Keep the Use this for Recipient URL and Destination URL checkbox ticked.

Paste in URL

  1. In the Audience URI (SP Entity ID) field, enter the Entity ID from Step 1.

Paste in

  1. Scroll down to the Attribute Statements section.
  2. Open the Name format dropdown.
  3. Choose URI Reference.

Choose 'URI Reference'

  1. Open the Value dropdown.
  2. Choose user.email.

Choose 'user.email'

  1. Enter the schema in the Name field.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

Enter the schema in the Name field.

  1. Click Finish to complete the setup.

Click 'Finish'

  1. Open the Actions dropdown.

Open Actions

  1. Select View IdP metadata.

Click 'Download certificate'

  1. Scroll to the SAML 2.0 entry.
  2. Copy the Metadata URL. You will need this for Step 3.
image-20260902-035436.png

Step 3: Setting up SSO in Mazlan Home

Once your identity provider is configured in Step 2, load its metadata into Mazlan Home to complete the connection. Mazlan Home accepts either a metadata file or a metadata URL.

To load the metadata:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Select for IDP configuration type.

image-20260824-144126.png
  1. Click Next.
  2. For SAML Configuration:

  • Add a Provider Name that will be displayed as the label on the login screen.

image-20260824-144220.png

  • Scroll down to Metadata Document Source. 

  • Update the metadata by either uploading the file or pasting the metadata URL.

image-20260824-144710.png
  1. Copy the value below into the email and preferred_username attributes:
image-20260902-035631.png
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  1. Click Apply configuration.

Step 1: Gathering information

Before you start, access the service provider information within Mazlan Home as you will need this information for Step 2.

To access the service provider information:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Copy the Entity ID and Reply URL shown on this screen. You will need this information for Step 2.

    image-20260824-133001.png

Step 2: Configuring OneLogin

OneLogin is an access management solution offered by One Identity.

To configure OneLogin:

  1. Access the OneLogin portal.
  2. Open the Applications tab.
  3. Select Applications.

Click 'Applications'

  1. Click Add App.

Click 'Add App'

  1. Search for saml test.

Click 'SAML Test Connector (IdP)'

  1. Select SAML Test Connector (IdP) from the results.

Click 'SAML Test Connector (IdP)'

  1. Enter Mazlan Home or Ideagen Quality Management Core in the Display Name field.
  2. Click Save.

Click 'Save'

  1. Navigate to the Configuration section.

Click 'Configuration'

  1. In the Audience field, enter the Entity ID from Step 1.

Fill in the copied text into Recipient textbox

  1. Enter the Reply URL from Step 1 in the Recipient, ACS (Consumer) URL Validator, and ACS (Consumer) URL fields.
  2. Click Save.

Click 'Save'

  1. Open the Parameters section.

Click 'Parameters'

  1. Click the Add button.

Click on the 'Add' button

  1. Enter the email schema into the Field name.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

Enable the 'Include in SAML assertion' option

  1. Tick the Include in SAML assertion flag.
  2. Click Save.

Click 'Save'

  1. Select Email from the Value dropdown.
  2. Click Save.

Click 'Email'

  1. Open the MORE ACTIONS menu in the Parameters section.
  2. Select SAML Metadata from the dropdown list.
  3. The metadata file download will start automatically. You will need this for Step 3. 
image-20260902-034911.png
  1. Open the Users tab.
  2. Select Users.

Click 'Users'

  1. Open your user account.

Click on your user(s)

  1. Open the Applications section.

Click 'Applications'

  1. Click the Add button.

Click on the Add button

  1. Select the method you previously created.
  2. Click Continue.

Select your application

Step 3: Setting up SSO in Mazlan Home

Once your identity provider is configured in Step 2, load its metadata into Mazlan Home to complete the connection. Mazlan Home accepts either a metadata file or a metadata URL.

To load the metadata:

  1. In Mazlan Home, navigate to the Admin Console.
  2. Open the Security Centre.
  3. Select Authentication.
  4. Click External IDP Configuration.
image-20260824-143927.png
  1. Click Add identity provider.
image-20260824-144109.png

  1. Select for IDP configuration type.

image-20260824-144126.png
  1. Click Next.
  2. For SAML Configuration:

  • Add a Provider Name that will be displayed as the label on the login screen.

image-20260824-144220.png

  • Scroll down to Metadata Document Source. 

  • Update the metadata by either uploading the file or pasting the metadata URL.

image-20260824-144710.png
  1. Copy the value below into the email and preferred_username attributes:
image-20260902-035631.png
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  1. Click Apply configuration.

What do you think about this article?

Your feedback helps us improve

More articles in this section

Looking for more help? Ask the Community

On this page