MonoSign Configuration

You can integrate MonoSign to make the authentication process easier. The following configurations must be completed in order to integrate.

SAML Connection Configuration:

In the MonoSign administrator dashboard, navigate to Applications and select Add New → Create From Scratch.

Create New Application Page

After giving it a display name, click Create Application.

New Application Initial Setup

Then configure the Access Settings according to your organisation's needs.

Application Access Control Setup

After creating the application, go to Application Dashboard → Keys → Add New Key.

Adding new SAML Key Page

SAML Key Configuration

In the key creation screen, SAML should be selected and the Create option should be applied.

Download the IdP metadata by clicking the Download IdP Metadata button.

SAML Connection Page

Save this file and upload it in the XML File field of the New SAML Provider form. The file is parsed to pull in MonoSign’s endpoints and certificates.

Click the Configure button and fill in the following information:

ACS URL: Copy this value from the ACS Url field of Forestall's New SAML Provider page. The field is filled in as soon as you type the Provider Name. It must exactly match Forestall’s ACS URL.

SAML Connection Configuration

Role and Username Mapping Settings

In MonoSign’s Attributes tab, add the following two assertion attributes so Forestall can read them:

Username Attribute Key

• Attribute: the value you entered in Forestall's Username Attribute Key field (for example username)

• Value: {{UserName}}

• Press plus icon to save

Username Attribute Configuration Page

Role Attribute Key

• Enabled: True

• Attribute Name: the value you entered in Forestall's Role Attribute Key field (for example role)

• Format: {{Name}}

Role Attribute Configuration Page

Once the MonoSign app configuration has been saved:

1. The IdP Metadata XML must be downloaded from the IdP.

2. In Forestall’s New SAML Provider page (Configuration Center > SSO > New Provider), the XML must be uploaded in the XML File field.

3. The configuration must be saved in Forestall.

4. MonoSign users or groups must then be assigned to the app.

After these steps, Forestall SSO Login will function with correct username and role mappings.