Configuring Single Sign-on

1. Ask your IT department to create a SAML metadata file for the staging (test) environment and send the file to the TrustArc Support team at [e-mail]. The SAML metadata file should contain the following information:

• SSO Endpoint for your staging (test) environment
• X509 certificate of your identity provider

NOTES:

• The metadata file should be compliant with SAML 2.0 standard.
• To speed up the process, you may send TrustArc the SAML metadata files for both your STAGING and your PRODUCTION environments at the same time. If you do not have a test environment, then send only one metadata file.
• If you need the entity ID and the ACS URL to generate your metadata, please refer below. If you are setting these values, please let the TrustArc Support know of the value for the “yourcompany“. TrustArc Support will make sure these values match on our side when generating our metadata.
  • Staging
    1. Entity ID: https://login-stage.truste.com/
    2. ACS URL: https://login-stage.truste.com/spsaml?continue=https%3A%2F%2Fyourcompany-sso-stage.truste.com%2F
  • Production
    1. Entity ID: https://login.truste.com/
    2. ACS URL: https://login.truste.com/spsaml?continue=https%3A%2F%2Fyourcompany-sso.truste.com%2F
  • Please set the required attributes. For more information, see Understanding the required attributes in the AttributeStatement section.

2. Wait for TrustArc to give you the following information after it configures Assessment Manager on its side using the staging metadata file:

• TrustArc SAML metadata file with TrustArc X509 certificate for TrustArc staging environment. Your IT department will need the file to configure your identity provider to authenticate TrustArc SAML requests.
• Instructions to test the STAGING environment.*Confirm to TrustArc Support whether the Single Sign-on works as expected in your STAGING environment. If there are any issues, TrustArc Support will assist in troubleshooting and may ask for a SAML Trace.

3. If the SSO works as expected on STAGING, send TrustArc your PRODUCTION metadata file for your production environment with the SSO Endpoint and X509 certificate. TrustArc will send you back the following information:

• TrustArc SAML metadata file with TrustArc X509 certificate.
• Instructions to test the PRODUCTION environment.*Confirm to TrustArc Support whether the Single Sign-on works as expected in your production environmentl. If there are any issues, TrustArc Support will assist in troubleshooting and may ask for a SAML Trace.