ADFS SAML (QUX)

Enabling QUX (Quadrant UX) SAML SSO with ADFS as the Identity Provider (IdP).

Please Note:

This article is ONLY for customers configuring SAML SSO for Quadrant UX (QUX) deployments using ADFS as the IdP.

If you are configuring ADFS SAML for the Respond UX, please see ADFS SAML (RUX) instead of this article.

While similar, there are some differences in the implementation for customers using the Respond UX. If you are unsure which UX you are using, please see: Vectra Analyst User Experiences (Respond vs Quadrant) for more information.

The Quadrant UX requires different SAML claim names than the Respond UX when setting up SAML 2.0 based SSO but the claim creation process in the IdP is similar.

Multiple SAML Profile Support

Vectra now supports multiple SAML profiles in private preview. Not all customers will require this, and NO changes are required for existing single IdP SAML configurations. If you are interested in this feature prior to it's planned general availability in the v9.10 release, please ask your Vectra account team.

This feature was not available at the time the attached guide was created.

Please Note:

• Existing customers do NOT need to do anything if they will continue to only have a single SAML IdP configured.
• Any new profile that is added, for new or existing customers, will now need to have a Domains list configured as part of the Vectra SAML profile.
• If you add a 2nd profile to an existing deployment that did NOT have a Domains list configured previously, you MUST edit that existing profile to add the Domains mapping for that IdP.
• Nothing changes on the IdP side of the configuration.
• When multiple profiles are configured, users will be asked to enter their email address to be redirected to the appropriate IdP when they click Login with SSO on the Vectra login screen.

Please see attachment at the bottom of this article for the full document!

Contains:

• Prerequisites
• SAML Authentication Workflow with ADFS
• Configuring ADFS and Vectra

  • Get SAML Profile Information for ADFS
  • Add a Relying Party Trust
  • Add a Claim Description
  • Add Rules Claim

    • Add the SSO rule Claim
    • Add Role rule Claim
  • Create SAML Profile
  • Test your new SAML Single Sign-On Functionality
• Worldwide Support Contact Information

Attachments

3MB

SAML SSO Using ADFS - 2022_Jan_6.pdf

PDF

Open