Using Duo Single Sign-On as an identity provider
You can use Duo Single Sign-On as an identity provider to access SC//Reliant™ Platform Manager. To do this, you create a Cloud Application on the Duo platform.
Step 1: Create the Duo Cloud Application
The Duo documentation provides the steps for creating a Cloud Application on their platform. For more information, see Single Sign-On for Generic SAML Service Providers in the Duo documentation.
- Access and log in to your Duo Admin Dashboard.
- From the left navigation, choose Applications, Application Catalog.
- Search for
Generic SAML Service Providerand choose Add. (In the older Duo Applications page, choose Protect an Application, locate Generic SAML Service Provider, and choose Protect instead.)
- On the application creation screen, do the following.
- For Application name, specify
SC//Reliant Platform Manager. - For User access, you can decide whether to turn on access to this application for some or all of your user accounts in Duo.
- In the Service Provider section, use the following settings. For any settings not specified, you can either leave them at the default settings or use the Duo documentation for further assistance.
- For Application name, specify
| Setting | Value |
|---|---|
| Entity ID | https://platform.reliant.io |
| Assertion Consumer Service (ACS) URL | https://platform.reliant.io/saml/consume |
| Single Logout URL | https://platform.reliant.io/saml/logout |
| Service Provider Login URL | leave blank |
| Default RelayState | leave blank |
| NameID Format | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress |
| NameID attribute | <Email Address> |
| Signature algorithm | SHA256 |
| Signing options | Select both Sign response and Sign assertion |
Step 2: Retrieve the Duo Single Sign-On Identity Provider metadata
Once you have your Duo Cloud Application created, retrieve the SAML metadata file and provide it to your Scale Computing Account Manager to complete the setup.
- In the Duo Admin console, access the settings for the SC//Reliant Platform Manager application you created.
- In the Downloads section, download the SAML Metadata file to provide to your Scale Computing Account Manager to add to the SC//Reliant Platform Manager.
Step 3: Create and assign user accounts to the SAML application
To complete the authentication workflow in the Duo Cloud Application, you need to create user accounts in the Duo Admin Dashboard for each SC//Reliant Platform Manager user and assign them to your Duo SC//Reliant Platform Manager application. For more information on creating users, see Duo Administration - Manage Users in the Duo Documentation.
IMPORTANT: Ensure that the Email Address field in Duo matches the user's SC//Reliant Platform Manager account email address. It must be in all lowercase, otherwise an error will be received when logging in to SC//Reliant Platform Manager.
Troubleshooting login issues when using Duo Single Sign-On as an Identity Provider
Issue: Receiving error "Invalid Email or password" when logging in to SC//Reliant Platform Manager
Possible causes: If you receive an Invalid Email or password error when logging in to SC//Reliant Platform Manager, ensure that your Duo email address is the same as the email address for your SC//Reliant Platform Manager account. They must match the case as well, so ensure your email address is all lowercase in the Duo application. If you need to transform the Duo username to use lowercase letters, you can use the toLowerCase(user.email) syntax to override the format. For more information, see Attribute Transformations in the Duo Documentation.