https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/index.html Recent content in 2.7 Setting up IdP linkage on JP1 Cloud Service/Operations Integration User's Guide Hugo -- gohugo.io en https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_oidc/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_oidc/index.html This section describes the connection setup procedure when using OIDC as the protocol for authentication for IdP linkage. When using OIDC, the following conditions must be met. The IdPs support authorization code flows User ID (username), first name, last name, and e-mail address can be obtained with an ID token or UserInfo endpoint The following is the procedure for setting up OIDC connection. (Figure) Setting up OIDC connection ① Providing IdP linkage information set in Ops I to the IdP https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_saml/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_saml/index.html This section describes the connection setup procedure when using SAML as the protocol for authentication for IdP linkage. When using SAML, the SAML assertion must be able to obtain the user ID (username), first name, last name, and e-mail address. The following is the procedure for setting up an IdP using SAML. (Figure) Setting up SAML connection ① Providing information set in the IdP to Ops I The IdP administrator provides the Ops I security administrator with information such as the IdP's identity provider entity ID and single sign-on service URL (AuthnRequest URL). https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_mapping/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_mapping/index.html To link IdP users with Ops I users, map attribute information, groups, and roles of Ops I users based on information of IdP users. Multiple mapping configurations can be registered for each OIDC or SAML connection setting. The mappings are configured by Ops I security administrators. (Figure) Mapping outline The following attributes are required in Ops I user profiles and must be assigned values by manual or automatic mapping. If any of the values are missing, a login error will occur. https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_login_logout/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://itpfdoc.hitachi.co.jp/manuals/JCS/JCSM71029001e/setting/external_idp/idp_login_logout/index.html This section describes logging in to and logging out of Ops I through IdPs. The following are the prerequisites for logging in to Ops I through IdPs. The information of IdP users can be obtained To map a user between IdPs and Ops I, user attribute information needs to be mapped between them. The following is the attribute information that needs to be mapped. If the value is missing, a login error will occur.