You can integrate MonoSign to make the authentication process easier. The following configurations must be completed in order to integrate.
SAML Connection Configuration:
In the MonoSign administrator dashboard, navigate to Applications and select Add New → Create From Scratch.
Create New Application Page
After giving it a display name, click Create Application.
New Application Initial Setup
Then configure the Access Settings according to your organisation’s needs.
Application Access Control Setup
After creating the application, go to Application Dashboard → Keys → Add New Key.
Adding new SAML Key Page
SAML Key Configuration
In the key creation screen, SAML should be selected and the Create option should be applied.
Download the IdP metadata by clicking the Download IdP Metadata button.
SAML Connection Page
Save this file and upload it in the XML File field of the New SAML Provider form. The file is parsed to pull in MonoSign’s endpoints and certificates.
Click the Configure button and fill in the following information:
ACS URL: Copy this value from the ACS Url field of Forestall’s New SAML Provider page. The field is filled in as soon as you type the Provider Name. It must exactly match Forestall’s ACS URL.
SAML Connection Configuration
Role and Username Mapping Settings
In MonoSign’s Attributes tab, add the following two assertion attributes so Forestall can read them:
Username Attribute Key
- Attribute: the value you entered in Forestall’s Username Attribute Key field (for example
username) - Value:
{{UserName}} - Press plus icon to save
Username Attribute Configuration Page
Role Attribute Key
- Enabled: True
- Attribute Name: the value you entered in Forestall’s Role Attribute Key field (for example
role) - Format:
{{Name}}
Role Attribute Configuration Page
Once the MonoSign app configuration has been saved:
- The IdP Metadata XML must be downloaded from the IdP.
- In Forestall’s New SAML Provider page (Configuration Center > SSO > New Provider), the XML must be uploaded in the XML File field.
- The configuration must be saved in Forestall.
- MonoSign users or groups must then be assigned to the app.
After these steps, Forestall SSO Login will function with correct username and role mappings.