Welcome to Oracle Service Cloud Ask the Experts

Transcription

1 Welcome to Oracle Service Cloud Ask the Experts Best Practices for Implementing & Maintaining SSO Presenter: Shane Parsons Dial-In: Conference Code: Security Passcode: 1234 Lines have automatically been muted. #6 to unmute *Ignore the attendee ID that appears in the pop up once logging into WebEx.* Global Numbers: Australia: Brazil (San Paulo): Brazil (Rio de Janeiro): Canada (Vancouver): Canada (Toronto): Hong Kong: India (Bangalore): India (Chennai): India (Kolkata): India (New Delhi): Netherlands: Pakistan: Romania: Spain: Switzerland: United Kingdom:

2 Topics Covered Concepts to understand before implementing SSO Implementing different types of SSO Common mistakes during implementation Demo Questions 2

3 Concepts to understand before implementing SSO

4 Concepts to understand before implementing SSO General understanding of how SSO works Saml response decoders Fiddler Saml Chrome extensions Saml tracer in Firefox Decode and read assertion Certificate Management Is certificate valid Does certificate require intermediate certificates for validation 4

5 Implementing different types of SSO

6 Customer portal SSO Supports identity provider (IDP) initiated SSO only Assertion Consumer Service (ACS) url parameter> Ex. contact.login or contact. s.address Entity ID can be any value in IDP Redirect added to assertion consumer service (ACS) url Ex. /ci/openlogin/saml/redirect/app/ask 6

7 Agent console IDP SSO Version 1 ACS url parameter> Ex. Account.Login or Account. s.Address Version 2 Must be used if implementing for AgentWeb ACS url Configuration performed in console via component Single Sign On Configurations Export out metadata file and import into IDP Import IDP metadata file into Oracle Service Cloud Active checkbox should only be checked Entity ID can be any value in IDP Must use Internet Explorer to launch console 7

8 Agent console IDP SSO login process 8

9 Browser User Interface (Browser UI) IDP SSO ACS url Configuration performed in console via component Single Sign On Configurations Export out metadata file and import into IDP Import IDP metadata file into Oracle Service Cloud Active checkbox only Relay State set to 9

10 Agent Console and Browser UI service provider (SP) SSO ACS url Configuration performed in console via component Single Sign On Configurations Export out metadata file and import into IDP Import IDP metadata file into CX Supports single logout Active and Web SSO checkbox No setup for Agent Web needed Entity ID for console must match in IDP 10

11 Mandatory requirements for all SSO types Signing certificate uploaded into File Manager Additional Root Certificates folder Intermediate certificates must also be uploaded Config SAML_20_SIGN_CERTS Fingerprint of signing cert Remove colons 11

12 Common mistakes during implementation SAML_20_SIGN_CERTS Colons not removed Hidden spaces at either front or back of fingerprint Wrong value all together IDP using http instead of https for ACS url Causes assertion to get lost during redirect to https Entity id doesn t meet requirements of IDP - SP initiated SSO Some IDPs don t support special characters such as plus sign Subject not passed over since request unable to be validated 12

13 Common mistakes during implementation Signing certificate unable to be validated Expired Requires intermediate/chain certificates Wrong certificate uploaded Subject incorrect Value doesn t match authenticating column in database Case sensitive not set as login Account or Contact not in database ANY-TRUSTED used in production Signing certificate not validated against uploaded certificates 13

14 Demo 14

15 Q&A Chat and Phone Lines Send your chats to ALL PANELISTS Lines are muted. Press #6 to unmute. Recommend unmuting and then muting via your device or desk phone 15

16 Have a Question? Ask the Experts! SAVE Extending Data Into Your Site Thursday, Jan. 11 a.m. EST Troubleshooting Wizardry Thursday, Feb. 11 a.m. EST Register at:

17

18 Continue the Conversation 18

19 Your Feedback Once I end the meeting, You will get a notification that the host has ended the meeting. Click OK. A short feedback survey will appear in your browser. 19

20 Thank You! 20

21