Scenario:
Proofpoint Essentials supports integration with Identity Providers for authentication adhering to Security Assertion Markup Language (SAML) standards. Multiple identity providers for an organization are fully supported.
Proofpoint Essentials supports single sign-on (SSO) via Security Assertion Markup Language. When working with an external IdP, it can be set up as your identity provider (IdP) for SSO to Proofpoint Admin Console.
Creating An Identity Provider (IdP) For Single Sign-On:
- Navigate to Administration > Account Management > Identity Providers.
At the top right-hand corner, click Add Identity Provider.
In the New Identity Provider dialog panel, add a meaningful name and description to the Identity Provider. The given name will display on the Identity Provider button on the main login screen.
In the Icon section, select the appropriate icon according to your desired integration.
- Click Next.
Configure the necessary SAML assertions for Single Sign-On configuration to be used in the organizations Identity Provider portal. Copy and paste into your Identity Provider.
Entity ID - Some vendors may refer to it as Assertion Consumer Service, Identifier or Entity ID. This dictates the entity or audience the SAML Assertion is intended for. This field is frequently referred to as the Entity ID or Audience URI by vendors. It can technically be any string of data up to 1024 characters long but is usually in the form of a URL that contains the Service Provider’s name within and is often simply the same URL as the ACS.
Login URL - Sign on URL is used if you would like to perform service provider-initiated single sign-on.
Logout URL - This URL is used to send the SAML logout response back to the application..
X.509 Certificate - Certificate used to sign SAML tokens issued to your Proofpoint Essentials.
- Configure the necessary SAML assertions for Single Sign-On configuration to be used in Proofpoint Essentials. Copy and paste from your Identity Provider.
- Turn on the Identity Provider by clicking Enable Single Sign-On. When enabled, the Identity Provider Sign in button will display on main login screen.
- Click Save and Close.