Update your existing SAML 2.0 integration

Update your existing SAML 2.0 integration.

Before you begin

Role required: sso_config_admin, business_rule_admin, script_include_admin

About this task

Request the SAML 2.0 Update 1 plugin. Contact Customer Service and Support to request the SAML 2.0 Single Sign-On - Update 1: security enhancements plugin. The plugin applies updated versions of the SAML2SingleSignon installation exit (login script), SAML2Logout installation exit (logout script), and SAML2 script include (script object).

Merge customizations from existing installation exit scripts into new scripts. The update saves an inactive copy of the integration's original installation exit scripts. You can use these copies to merge any customizations that you made to the login and logout scripts to the new versions of these installation exits.

Table 1. Merge Customizations from Existing Installation Exit Scripts into New Scripts

Original Installation Exit Script Name	Original Script Status	New Installation Exit Script Name	New Script Status
SAML2SingleSignon	Inactive	SAML2SingleSignon_update1	Active
SAML2	Inactive	SAML2_update1	Active
SAML2Logout	Inactive	SAML2Logout_update1	Active

You can navigate to the SAML 2.0 login and logout installation exit scripts using these paths:

• SAML 2 Single Sign-on > Login script.
• SAML 2 Single Sign-on > Logout script.
• System Definition > Installation Exits.

You can navigate to the SAML 2.0 update 1 script include using these paths:

• SAML 2 Single Sign-on > Script object.
• System Definition > Script Includes.

Test the Update.

Procedure

1. Add a system property called glide.authenticate.sso.saml2.debug with a value of true.
2. Attempt SAML 2.0 login.
3. Review the system log.
   SAML2 validation errors begin with the text SAML2ValidationError.
4. Identify and fix typical login errors.
   For more information, see Multi-SSO (SAML 2.0) errors and fixes.