+Online Help

SafeNet Trusted Access for Slemma


The application template provides the ability to enable single sign-on for users accessing the Slemma application through SafeNet Trusted Access.

The following use cases can be configured for Slemma:

SP-initiated SSO

IdP-initiated SSO

Just-in-Time (JIT) Provisioning

Configuring SafeNet Trusted Access for Slemma is a three-step process:

1.Slemma setup

2.SafeNet Trusted Access setup

3.Verify authentication

Slemma Setup

As a prerequisite, download the Identity Provider signing certificate from the SafeNet Trusted Access console by clicking the Download X.509 certificate button. You will need this certificate in one of the steps below.

Perform the following steps to configure SafeNet Trusted Access as your Identity Provider in Slemma:

1.Log in to Slemma as an administrator using the URL, https://slemma.com/auth.

2.On the Slemma dashboard, in the left pane, click Admin.

3.On the Admin Window, click White label.

4.On the White label window, scroll down to SSO settings and perform the following steps:

a.Enable the Enable Single Sign On (SAML 2.0) toggle button.

b.In the SAML sign-in URL field, enter the SINGLESIGNONSERVICE URL that is available on the SafeNet Trusted Access console.

You can copy this URL by clicking the Copy to Clipboard icon available next to the SINGLESIGNONSERVICE field.

c.In a text editor, open the IdP certificate that you downloaded earlier from the SafeNet Trusted Access console and copy the entire text.

d.In the X.509 Certificate field, paste the entire certificate text that you copied in the previous step.

e.In the Acceptable domains separated by a semicolon field, enter the domain name (for example, safenet.com) of the email that is to be allowed to authenticate through your SAML server.


SafeNet Trusted Access Setup

After completing the first step of configuring SafeNet Trusted Access in Slemma, the second step is to activate the Slemma application in SafeNet Trusted Access by performing the following steps:

1.In the Applications pane, the Slemma application you added earlier is in the inactive state by default. To configure and activate this application, click the application (for example, Slemma) and proceed to the next step.

2.Under STA Setup, under User Login ID Mapping, in the NAME ID field, ensure that Email address is selected.

3.Click Save Configuration to save the details and activate the Slemma application in SafeNet Trusted Access.

Verify Authentication

Using STA Console

Navigate to the Slemma SAML login URL, https://slemma.com/saml-auth. Enter your email ID and click SIGN IN.

You will be redirected to your SafeNet Trusted Access sign-in page. Enter your primary directory login information, approve the two-factor authentication, and you should be redirected to the Slemma user dashboard after authentication.

Using STA User Portal

Navigate to the User Portal URL to log in to the STA User Portal dashboard. On the dashboard, you will see a list of applications to which you have access. Click the Slemma application icon. You should be successfully logged in to the Slemma user dashboard after authentication.


© 2019 SafeNet Trusted Access. Various trademarks are held by their respective owners.