> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/configuration-center/sso/monosign-configuration.md). # MonoSign Configuration You can integrate MonoSign to make the authentication process easier. The following configurations must be completed in order to integrate. ## SAML Connection Configuration: In the MonoSign administrator dashboard, navigate to **Applications** and select **Add New → Create From Scratch**.
Create New Application Page

Create New Application Page

After giving it a display name, click **Create Application**.
New Application Initial Setup

New Application Initial Setup

Then configure the **Access Settings** according to your organisation's needs.
Application Access Control Setup

Application Access Control Setup

After creating the application, go to **Application Dashboard → Keys → Add New Key**.
Adding new SAML Key Page

Adding new SAML Key Page

SAML Key Configuration

SAML Key Configuration

In the key creation screen, **SAML** should be selected and the **Create** option should be applied. Download the IdP metadata by clicking the **Download IdP Metadata** button.
SAML Connection Page

SAML Connection Page

Save this file and upload it in the **XML File** field of the **New SAML Provider** form. The file is parsed to pull in MonoSign’s endpoints and certificates. Click the **Configure** button and fill in the following information: **ACS URL**: Copy this value from the **ACS Url** field of Forestall's **New SAML Provider** page. The field is filled in as soon as you type the Provider Name. It must exactly match Forestall’s ACS URL.
SAML Connection Configuration

SAML Connection Configuration

### Role and Username Mapping Settings In MonoSign’s **Attributes** tab, add the following two assertion attributes so Forestall can read them: **Username Attribute Key** * **Attribute:** the value you entered in Forestall's **Username Attribute Key** field (for example `username`) * **Value:** `{{UserName}}` * Press plus icon to save
Username Attribute Configuration Page

Username Attribute Configuration Page

**Role Attribute Key** * **Enabled:** True * **Attribute Name:** the value you entered in Forestall's **Role Attribute Key** field (for example `role`) * **Format:** `{{Name}}`
Role Attribute Configuration Page

Role Attribute Configuration Page

Once the MonoSign app configuration has been saved: 1. The IdP Metadata XML must be downloaded from the IdP. 2. In Forestall’s **New SAML Provider** page (**Configuration Center > SSO > New Provider**), the XML must be uploaded in the **XML File** field. 3. The configuration must be saved in Forestall. 4. MonoSign users or groups must then be assigned to the app. After these steps, Forestall SSO Login will function with correct username and role mappings.