Adding an Identity Provider using SAML

1. Select the Identity Provider tab under Administration > Account Settings.
2. Click + Add Identity Provider.
3. Select SAML from the Identity Provider dropdown.
4. Enter your choice for the name of this IdP integration in the NAME field.
5. Enter the email domain for your SAML account in the EMAIL DOMAIN field.
6. Enter the following configuration information:
   1. Enter IdP issuer URI in the IDP ISSUER URI field.
   2. Enter the IdP single sign-on URL in the IDP SINGLE SIGN-ON URL field.
   3. Upload your SAML signature by clicking the Upload button in the IDP SIGNATURE CERTIFICATE field.

   Note: If you do not yet have the above configuration values, you can leave the fields blank for now.

7. Click Save.

   The configured IdP appears on the main Identity Provider view and the Assertion Consumer URL and Audience URI (Entity ID) is provided under Service Provider Information.

8. Click the newly created SAML IdP provider and copy the Assertion Consumer Service URL and Audience URI that appears under Service Provider Information.
9. If you left values blank in Step 6, enter them now:
   1. Enter IdP issuer URI in the IDP ISSUER URI field.
   2. Enter the IdP single sign-on URL in the IDP SINGLE SIGN-ON URL field.
   3. Upload your SAML signature by clicking the Upload button in the IDP SIGNATURE CERTIFICATE field.
10. The connection must be successful to enable the IdP configuration. Test it as follows:
    1. Copy the test URL.
    2. Open a new incognito tab and paste in the URL - the URL will redirect to your IdP login page; complete the login process there. If the login is successful you will be redirected to a page showing a successful test result.
    3. In Forescout Cloud, verify the results of the test posted on the main Identity Provider view under Account Settings. The IdP configuration can be enabled after confirmation of a successful test connection.