This article will detail how you can use Auth0 SAML with your FTP Today account.
You will need two browser windows/tabs for these steps.
Create the Identity Service at FTP Today
Log into your FTP Today Site. Navigate to Settings > Authentication > Identity Service. Click on Add Service.
Enter a name for the New Service and select “Auth0 SAML” as the provider and Save.
Create the Application at Auth0
On your FTP Today Site, locate the configuration information.
Log into your Auth0 portal. Select SSO Integrations and Create SSO Integration.
Enter a name for the application, select Regular Web Applications and Create.
Select the configuration (ellipsis) for the application you created and select Settings.
Copy the Logo URL from your FTP Today Site to the Application Logo field and Save Changes.
Select Addons then enable the SAML2 Web App Addon.
Copy the Application Callback URL from your FTP Today site to the Auth0 site and Enable.
Select Empty rule
Enter a name for the rule, enter this rule and Save changes.
Configure the Identity Service at FTP Today
Continuing in the Auth0 portal, select Usage. Locate the Identity Provider Metadata. Right click on the Download and select Copy link.
Select “I want to use a Metadata URL to set this configuration.”, paste the Download link as the Metadata URL and Save.
Assign the user to the application at AzAuth0
Add the user at FTP Today
In your FTP Today site, navigate to the Users area and select Add User.
Enter the username as set up in the Auth0 service and select the Auth0 SAML service you created. Complete the rest of the fields as needed and Save.
Auth0 supports an advanced security feature that offers further user verification. You may register the user with a unique identifier from Auth0. In addition to matching the User Name to identify the user, we will match the Auth0 ID for that user.
When setting up the user, navigate to the user at Auth0, locate the user_id and copy the part after “auth0|”.
Include that value as the IdP User Unique Identifier when you create the user.
If the user already exists in your FTP Today site, you may change these settings on the Authentication tab for the user.
User access through FTP Today
Navigate to the site and enter the username and click Next.
There will be a brief “Authenticating” message.
If the user does not have an open session with Auth0, they will have to authenticate.
The user will now be logged into your FTP Today Site.
Ending the session
When done, the user may log out of the FTP Today site or allow the session to expire. This will not log the user out of Auth0 or any other services authenticated through Auth0.
The session timeout on the FTP Today Site may log the user out of the site even if they are still logged in at Auth0. In that case, after reentering their username they will be immediately authenticated to the site.
Encrypting the SAML response
This is an advanced setting required for FIPS compliance. At your FTP Today Site, navigate to the Identity Service, toggle the “Encrypt Assertion” to on and Save.
You will now see an Encryption Certificate link near the page bottom.
Consult https://auth0.com/docs/protocols/saml-configuration-options/sign-and-encrypt-saml-requests to configure Auth0.