Configure service provider
Prerequisite: Preparation.
This section describes how to configure ALM service provider (SP) by completing the Service Provider Settings step.
After completing this step, you can find the SP configuration file in the following ALM repository: {ALM repository}\sa\DomsInfo\osp\basic.properties.
Properties
In the Service Provider Settings > Properties tab, complete the following configurations:
Field (* Required) | Description |
---|---|
*Service Provider Host Name |
|
*Service Provider Port |
|
*Service Provider Https Enabled |
|
*Enable Local Authentication |
This option controls whether or not ALM users that are set as local users can log in to ALM locally when ALM runs in SSO mode.
For details about configuring user's IdP ID and identity key, see Update user details. Note: The My Profile tab provides a shortcut to configure your IdP ID and identity key. See Set up your profile. |
*SSO Token Secret |
The SSO token secret is a credential granted from ALM SP to ALM and its value should be reserved in ALM SP in advance. ALM is required to carry this credential when it sends requests to its SP for SSO token generation. |
SSO Certificate
The SSO certificate is used to encrypt and decrypt the SAML requests and responses between ALM SP and IdPs.
Overview
You can provide the certificate either by uploading the keystore file or by entering the certificate information manually. After uploading the certificate, you can view its details or upload a different certificate.
Note: For details about how to create an SAML certificate for ALM, see FAQ.
Upload a keystore file
To provide your certificate by uploading a keystore file:
- Open Service Provider Settings > SSO Certificate.
- In the Certificate Submission Type filed, select Upload Keystore File.
-
In the Choose File to Upload field, select the keystore file that contains the certificate.
Make sure the certificate in the keystore file contains both the private key and the public key.
The following table lists the supported keystore types and the corresponding supported keystore file extensions.
Supported keystore types Supported file extensions JKS -
.jks
-
.ks
JCEKS -
.jce
PKCS12 -
.p12
-
.pfx
-
- Enter the keystore and key password.
- Enter the alias of the certificate that is used in the keystore file.
- Click Save.
Enter certificate information manually
To provide your certificate by entering the certificate information manually:
- Click Service Provider Settings > SSO Certificate.
- In the Certificate Submission Type filed, select Manually Enter.
- Enter the keystore and certificate passwords, certificate chain, and private key.
- Click Save.
Upload a different certificate
After uploading the certificate, you can view its details or upload a different certificate.
The SSO Certificate tab displays the alias and expiration date of the certificate. To view more details, click the View Certificate link.
To upload a different certificate:
-
Delete the current certificate.
Delete certificate using the wizard To delete the current certificate using the SSO Configuration wizard:
-
In the Service Provider Settings > SSO Certificate tab, click Delete.
-
In the Delete Certificate dialog box, provide the keystore and certificate passwords, and click Delete.
-
Refresh the page.
Delete certificate from the ALM repository Delete the current certificate from the following directory:
{ALM Deploy Directory}\ALM\repository\sa\DomsInfo\osp\.
-
- Upload the new certificate.
- Restart the ALM server. If ALM is deployed in a cluster environment, restart every node.
- If you have shared ALM SP metadata with your IdP, obtain the updated SP metadata and share it with your IdP again.
FAQ
Next steps: