> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/configuration-center/sso/monosign-configuration.md). # MonoSign Configuration Forestall ISPM can be integrated with the MonoSign system to make the authentication process easier. The following configurations must be completed in order to integrate. ## SAML Connection Configuration: In the MonoSign administrator dashboard, navigate to **Applications** and select **Add New → Create From Scratch**.
Create New Application Page

Create New Application Page

After giving it a display name, click Create Application
New Application Initial Setup

New Application Initial Setup

And then Acces Settings needs to be configured according to organisations needs.
Application Access Control Setup

Application Access Control Setup

After creating the application, go to **Application Dashboard → Keys → Add New Key**.
Adding new SAML Key Page

Adding new SAML Key Page

SAML Key Configuration

SAML Key Configuration

In the key creation screen, **SAML** should be selected and the **Create** option should be applied. Download IdP Metadata with clicking Download IdP Metadata button.
SAML Connection Page

SAML Connection Page

Save this file and upload it to Forestall. Forestall will parse it to pull in MonoSign’s endpoints and certificates. Press Configure Button and Fill with following information: **ACS URL**: This value is copied from Forestall after the SSO settings are saved. It must exactly match Forestall’s ACS URL.
SAML Connection Configuration

SAML Connection Configuration

### Role and Username Mapping Settings In MonoSign’s **Attributes** tab, add the following two assertion attributes so Forestall can read them: **Username Attribute Key** * **Attribute:** Forestall Username Attribute Key * **Value:** `{{UserName}}` * Press plus icon to save
Username Attribute Configuration Page

Username Attribute Configuration Page

**Role Attribute Key** * **Enabled:** True * **Attribute Name:** Forestall Role Attribute Key * **Format:** `{{Name}}`
Role Attribute Configuration Page

Role Attribute Configuration Page

Once the MonoSign app configuration has been saved: 1. The IdP Metadata XML must be downloaded from the IdP. 2. In Forestall’s **New Provider** screen, the XML must be uploaded via the **XML Upload Field**. 3. The configuration must be saved in Forestall. 4. MonoSign users or groups must then be assigned to the app. After these steps, Forestall SSO Login will function with correct username and role mappings.